Position: Senior Cyber Security Expert
Company: Lohika
Experience required: 3y
Category: Security
English level: upper
Published: 2022-10-01T00:00:00+03:00

Purpose of the job:
As part of the implementation of its strategic plan, Capgemini Engineering is transforming its organization, business processes and information systems. The transformation plan covers all key functional domains, including customer relationship management, human resource management, project execution management, talent management, knowledge management, finance, communication and business intelligence.
In this context, Capgemini Engineering decided to appoint Cyber Security Expert. Mission Responsible for the local implementation of the Group Information Security Policy, to manage and improve all aspects of Cyber Security to protect information systems, networks, infrastructures, and services, in addition to the management of a trusted delivery process of services and countering Fraud in the country.
MAIN TASKS AND RESPONSIBILITIES:

Manage all aspects of local Information Security, implement and adapt the Group Cyber Security Policy accordingly
Checking of Information Security compliance in the contractual clauses signed in the contracts, work closely with Account management teams to avoid any business impact with the clients
Manage local Information Security incidents, and consolidation in the country monthly report
Contributes to the Awareness and Training plan for the local country
Manage the follow-up of the country ISO 27001 Certification process, or create a Project Card allowing to engage in a Certification process according to the local business needs and the client's requirements

EDUCATION, SKILLS AND EXPERIENCE:
MUST HAVE:
An Expert with at least 7 to 10 years of experience in ICT domains (5+ years' experience in Information Security).
Education: MSc, University degree;
BE/Btech/MCA, CISSP, CISA or ISO27x Certification will be much appreciated
Team management
Finance management
Project management
Network engineering and design principles, practices, terminology, trends and usage utilized by large complex organizations;
IT security principles, practices, terminology and trends;
Communications hardware and associated software such as routers, network servers, computer integrated voice systems, intrusion detection/prevention, firewalls, gateways, content filtering, encryption, data loss prevention and other information security technologies;
Network services such as email transport, directory services and active directory;
Unix, Linux, Windows and operating system administration;
Communications protocols such as TCP/IP, UDP/IP, IPX/SPX;
Routing protocols such as EIGRP, OSPF, BGP;
Virtual local area network (VLAN) technology;
Wireless communications technologies and wireless IT security systems;
Information security forensic tools, rules of evidence and chain of custody;
Vulnerability management systems or services;
Web application architectures and web application IT security vulnerabilities;
Advanced knowledge/experience with SIEM, IDS/IPS, firewalls, advanced malware detection systems and other cyber security platforms is strongly preferred
Cyber Security Assessments and Audits;
Experience with ISO certifications
Legal, regulatory, cybercrime and Fraud
Fluent English is mandatory.