Position: Product Information Security Analyst
Company: omilia.com
Category: Security
Experience required: 2y
English level: upper

**Description:**

The Product Information Security Analyst shall be a member of the Information Security & Data Protection Office, working on increasing information security and business alignment. Combines business acumen with technical knowledge, assists in improving the information security posture with respect to delivering services and partnering with the leadership. Ensures that security issues are considered on an ongoing basis and across the organisation. Understands the key assets and processes, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary. Additionally, ensures business compliance with Information Security Policies and Standards while continuously monitoring and reporting on risks and documented exceptions, helping this way the business achieve their objectives while not compromising the security posture.


**Key Accountabilities:**

The Product Information Security Analyst has a four-part mandate from the CISO to do the following:

• raise the information security program’s profile within the organization; 
• increase delivery of information security services internally; 
• connect with business units, learn their needs, and offer them technical and operational support and organize and execute information security service delivery.

**In more detail:**
• Develop and maintain in depth understanding of business units’ processes, systems, technologies, data, customers, partners; 
• Embodying the role of Security Champion, participate in squad teams as security referent, present in every sprint planning, ensure that security is considered at every sprint during the development of User Stories, track progress against security; 
• Provide security expertise, acting as the primary information security contact / adviser for the Product Owners / Squad Leaders / DevOps / System Admins / Software Engineers / etc., serve as the conduit between teams to achieve good security; 
• Implement the Information Security Policies and Standards across the assigned squad teams / business units; 
• Assist in conversations between developers and security architects, creating concrete goals; 
• Communicate, oversee and carryout technical implementations of security solutions required to meet business objectives; 
• Drive the adoption of secure application design, integration with best modern SDLC and CI/CD application security practices, testing; methodologies and post-production risk governance; 
• Proactively identify noncompliance and areas of potential improvement, and facilitate development and deployment of standard solutions; 
• Participate in client facing engagement to represent the information security program; 
• Provide regular and timely reporting on the status of information security across the business units;
• Provide escalation path for security issues, incidents, and inquiries; 
• Work with Security Incident Response and Crisis Management teams to assist in effectively driving incidents to acceptable resolution; assist with investigations as needed; 
• Work with the Compliance and Information Risk Management team to drive policy and regulatory compliance; 
• Assist on the implementation and translation of information security policies.



**Knowledge, skills & experience:**

• Bachelor’s degree required, preferably in computer science or information systems;

• 2-3 years of Information Technology, with a background in Information Security and Compliance;

• Experience working in Agile or Waterfall methodology and a deep understanding of phased approaches to the Software Development Life Cycle;

• Broad technical background and solid understanding of application security (including OWASP), network security, Identity and Access Management, cryptography, and cloud security principles;

• Experience assessing and managing technology and information security risks related to application, network, and infrastructure;

• Ability to analyze systems, threat model new features, identify security vulnerabilities in implementation, and recommend information security controls to ensure end to end protection;

• Knowledge and experience of Information Security Risk and Security Governance;

• Ability to communicate clearly and effectively with both technology/development and business partners;

• Ability to translate technical/security issues to business users 
• Strong relationship, team building and facilitation skills;

• Effectively communicate technical issues to diverse audiences, both in writing and verbally;

• Ability to independently influence others to achieve objectives;

• Work independently and prioritize multiple tasks and adapt to needed changes;

• Ability to work under strict deadlines and remain calm under high pressure/difficult situations;

• Excellent use (both oral & written) of the Greek and the English language;

• Security certifications (e.g., CISSP, CISM, CRISC, CISA, ISO27001 Lead Auditor)
• I remain at your disposal for any additional information or clarifications required.

**Benefits:**
— Building successful cutting-edge technology products that are making global impact in service industry
— Work From Home policy applicable
— Proficient and fun-to-work-with colleagues
— Long-term employment with 24 working days vacation
— Apple gear
— With Omilia, you will be able to travel to Greece for team buildings at our amazing HQ offices