Job title:
IT Security Risk Consultant (Cloud)
Company:
Kubo
Job description
New challenges await an IT Security Risk Management Consultant who will focus on cloud security. If you want to develop and implement global security strategies, manage IT security risks, and provide consulting services on security policies and controls, now is your time!Join a large-scale company in the life sciences and pharmaceutical industry. We are looking forward to receiving your application.Key responsibilities
- Collaborating with CSRM stakeholders, Information Technology (IT), and business teams to develop global security strategies and risk assessment strategies mainly in cloud solutions
- Assisting in the development of security policies, standards, patterns, and guidance.
- Continuously updating job knowledge by tracking and understanding emerging security technologies, solutions, practices, and standards, participating in educational opportunities, and reading professional publications.
- Managing IT security, legal, and regulatory risks by performing IT security risk assessments and recommending appropriate security controls to address gaps that do not align with Bayer policies and regulatory requirements.
- Providing support and recommendations for the selection, security review, and lifecycle management of third-party services, products, and solutions; offering IT security consulting services to stakeholders, IT, business teams, and projects.
- Contributing to translating risks associated with the use of information technology, which are internally and externally regulated, into the digital environment.
- Performing cloud security assessments and recommending measures for a large-scale multi-cloud environment.
- Understanding emerging IT technologies, such as cloud platforms and mobile Bring Your Own Device (BYOD) strategies, as well as the associated security risks.
- Fulfilling departmental responsibilities related to the evaluation of vendor proposals, conducting process analyses, reviewing information security architectures, and recommending mitigation measures for exceptions not meeting company policies and industry standards.
- Supporting and executing tasks related to the IT security exception process, including managing and enhancing the process, providing remediation guidance, and reporting key performance indicators (KPIs).
Ideal candidate profile
- A bachelor’s degree with 5 years of relevant experience in Information Technology or Security.
- Proven experience in cybersecurity risk assessment, managing critical situations, and possessing analytical, conceptual, and technical skills with expertise in one of the major cloud platforms, such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
- Practical knowledge and experience with GRC tools like RSA Archer.
- Thorough understanding of NIST (National Institute of Standards and Technology) and ISO (International Organization for Standardization) standards.
- Clear understanding of security protocols and standards, as well as experience with software and security architectures.
- Strong foundational knowledge across all security domains.
- Familiarity with cloud networking architecture, cloud operations, security, automation, and orchestration
- Experience in reviewing network, firewall, and endpoint architectures, configurations, policies, procedures, and technical capabilities, including physical devices such as servers, IoT devices, and drones.
- Strong collaboration skills and ability to work effectively in both cross-functional and global teams.
- Demonstrated experience in managing complex projects.
- Process-oriented with strong documentation, communication, and interpersonal skills.
Conditions
- Working model: Hybrid (1 day in the office / 4 days remote)
- Location: Warsaw
- Form of cooperation: Employment contract
- Wide benefits package like: access to professional development tools, trainings and conferences, company bonus and reward structure, VIP Medical Care Package, pension plan, additional days off and more.
Recruitment steps
- Screening call (45 minutes)
- Tech interview with Client (1h)
- HR meeting with Client (1h)
- Decision and feedback
Expected salary
Location
Warszawa, mazowieckie
Job date
Sat, 24 Aug 2024 22:02:41 GMT
To help us track our recruitment effort, please indicate in your email/cover letter where (vacanciesineu.com) you saw this job posting.