Cyber Security Governance Specialist

Cyber Security Governance Specialist

MAIN DUTIES

• Defining, documenting and enforcing Group and Local Internal Security Regulations (Policies, Procedures, Standards)
• Conducting, reporting and monitoring the Company's IT Risk Assessment and any other kind of Security Assessment (eg. Third Party Security Assessment, Cloud Security evaluation)
• Supporting the Company’s Compliance to External Security Regulations (e.g. GDPR, PSD2, NIS, DORA, EBA Guidelines, Cyber Resilience Oversight Expectations)
• Supporting the Security Certification Program (e.g. ISO/IEC:27001; ISO/IEC:27017-18; PCI-DSS/3DS/PIN/CPP-CPL)
• Developing, maintaining and monitoring the Security Awareness Program (e.g. pills, videos, communications, training, phishing simulations)
• Supporting internal / third-party Audit or Assessment focusing on security topics (eg. Customer’s questionnaire)  
• Monitoring of findings and corrective actions identified 
• Defining and reviewing security clauses within supplier agreements 
• Developing, maintaining and monitoring the Security KPI framework

REQUIREMENTS

• At least 3 years of experience in complex IT organizations
• Degree in engineering, economics or related fields
• Certifications and/or knowledge of the main reference standards and best practices
• Strong analytical and problem-solving skills
• Ability to establish and maintain effective working relations with coworkers in an international work environment
• A high degree of commitment and flexibility
• Excellent communication skills in English, both orally and in writing

Nice to have: 

• Awareness of financial industry standards (like PCI DSS) will be considered as an advantage
• Good understanding of IT environment and payment business

WHAT WE OFFER

• Contract of employment (Full-time) or B2B
• Work in multilingual, multinational and multicultural environment
• Work in a convenient location, close to the center of the city
• Private medical care
• Llife insurance and sport benefits (Multisport card)
• Co-funded language-courses
• Full time home office
• Integration events and Corporate Social Responsibility projects
• Unlimited access to training platforms, Internal and external trainings