Position: Information security officer
Company: UnionFlame
Category: Security
Experience required: 2y
English level: upper
Published: 2021-03-01T00:00:00+02:00

Responsibilities:
• Plan and manage a coordinated enterprise-level security monitoring program that effectively identifies reviews, analyzes, transmits, and tracks security control deficiencies
• Monitor and, if necessary, coordinate disaster response activities in the event of major local or group incidents
• Advise various stakeholders as an IT security expert on risk and risk reduction
• Monitoring and managing improvement processes throughout the group together with system / application owners, third-party service providers
• Plan and coordinate an external security audit and monitor findings with group and local event owners
• Support the development of an IT security roadmap based on industry standards and best practices
• Proactively work with internal and external IT organizations on strategic and tactical information security plans, as well as on major systemic changes, to ensure compliance with information security standards and risks at the beginning of major changes / project
• Conduct risk assessment for internal and external suppliers and systems / applications as part of the risk assessment program for group suppliers
• Member of the Group's information security team involved in security monitoring, risk management and compliance with IT and information security requirements
• Collaborate with peers on group risk and compliance to ensure a coherent approach and contribution to monitoring and reporting on operational risk, including information security risks
• Educate and inform stakeholders about responsibilities and risks associated with information security

Requirements:
• from 2 years of experience in the functioning of information security in the corporate environment. Experience as an information security officer / manager or similar role is an advantage
• Experience in two or more of these subjects:
o risk management
o vulnerability management
o threat intelligence
o ethical hacking
o penetration testing / red-blue team testing
o application security testing
o internal or external IT security audits
o security in SDLC
o Identification and access control
• Broad conceptual understanding of IT systems, networks and application security
• Assist in improving the supply and management of key security technology platforms, including SIEM and DLP;
• Familiarity with the following security standards ISO27001 / 27002, PCI-DSS or similar
• Good communication skills, oral and written. Most business communications (meetings, presentations) are conducted in English