Position: Security Risk Analyst
Company: Luxoft
Category: Other
Experience required: 5y
English level: upper

Our client, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don't just provide re/insurance, we reinvent it.

How? By combining a strong and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business − property, casualty, professional, financial lines and specialty.

With an innovative and flexible approach to risk solutions, we partner with those who move the world forward.

There are three roles that includes working multiple with subject matter expert on a wide variety of topics to determine if temporary exceptions to the Information Security Policy are acceptable. Strong communication skills are a must as the candidate will be working with colleagues globally.
Responsibilities:
The Information Security Application Risk Specialist is an expanding role and entails driving our clients's security risk posture. The role includes working with multiple subject matter expert on a wide variety of topics to determine how much risk is introduced by our applications. Strong communication skills are a must as the candidate will be working with colleagues globally.
Mandatory Skills Description:
• Master's degree in Computer Science, Engineering, or related field with a minimum of 5 years of professional experience in Risk Management (Required) and/or Information Security (Preferred)
• Expert in synthesizing and clearly communicating complex information to all audiences up to C-Level leaders
• Experience in articulating risks in business language and advising on the appropriate risk management action
• Excellent attention to detail and the ability to create clear, concise and engaging presentations breaking down difficult problems (Required)
• Expert analytical and reporting skills
• Excellent interpersonal and collaborative skills
• Expert in Microsoft Office (Word, Excel, PowerPoint, SharePoint)
• Experience in multinational companies
• Strong knowledge of Risk management
• Strong knowledge of Risk management frameworks (ISO 3100X, NIST 800-30/37/39, ENISA, EBIOS, OCTAVE, FAIR)
Nice-to-Have Skills:
• Strong knowledge of Information Security frameworks (Mitre ATT&CK, NIST, ISO 2700X ...)
• Experience in information security management reporting and related methodologies
• Information Security and /or Information Technology industry certification (CISSP, CISM, or equivalent)
Languages:
English: C1 Advanced