- Employer: Emerald Zebra
- Career Level: Entry ( 0 -12 months )
Job Description
Our client is a telecommunications provider offering international voice, wireless broadband, SMS and communications network services to operators around the world.
Established in the year 2004, their footprint currently extends to Europe, the United States, the Middle East, North Africa and Asia.
Job Summary:
To contribute to the development, administering and control of IT security, and compliance activities.
To develop and sustain plans to improve and implement information security and data protection controls around IT systems, services, and processes to reduce IT issues and risks.
To lead, mentor and participate in various committees and audits.
Main Duties:
- Research and recommend IT standards, controls, policies and procedures based on best practice and participate in the implementation and monitoring of security and compliance
- Implement management recommended governance frameworks and standards that can enhance IT functions such as COBIT, COSO, ITIL, and ISO 38500, 27001, 27002,27018 and ensures that IT processes and activities are mapped to implemented IT standards
- Ensure that Security & adopted standards are considered in projects, initiatives, new implementations and operational tasks.
- Establish mechanisms and conduct assessments to identify, assess and mitigate IT Security Risks; develop and recommends corrective action plans for resolution
- Identify risk prevention methods and their administrative and technical procedures in order to mitigate the impact of risks or limit them.
- Identify and evaluate business and technology risks and report on the effectiveness of established controls to mitigate risks
- Ensure corrective and preventive actions against identified or potential nonconformities
- Ensure all the security incidents are identified , contained and managed properly
- Ensure compliance with cyber security standards, policies and procedures based on local and global standards as well as national cyber security policies.
- Perform IT assessments and provide recommendations for improvements
- Perform threat & Vulnerability assessment and provide recommendation accordingly
- Manage the remediation of vulnerability scans. Track, report, and identify solutions to mitigate or remediate the findings.
- Assist in evaluating new technology and security products for relevancy to Organization’s overall security strategy and in support to new business requirements/initiatives
- Acts as a focal point for the implementation of Critical changes in the environment
- Performing the Information Security officer (ISO) Role that is required by the ISO27001:2013 standard and ensure that the standard is maintained within the organization
- Initiate , manage , control and implement any related security programs across the organization
- Lead the efforts to implement up-to-date baselines for the secure configuration and operations of all in-place devices, systems, databases, and applications
- Work closely with the different IT departments and consultants to develop and coordinate a compliance schedule tailored to the applicable regulations and standards
- Participating in initiating and maintaining IT policies and procedures.
- Proactively identify and recommend process improvement to reduce risk and improve operational efficiency.
- Develop and conduct compliance related trainings and Information security awareness sessions and communications.
Skills and Experience:
- Bachelor’s degree in Information Technology / Computer Science / Computer Engineering with 0-2 of relevant work experience
- Expertise in formulating IT compliance goals and developing effective IT solutions / techniques
- Strong knowledge of IT standards and best practices as they relate to IT compliance such as ITIL, CoBiT, etc.
- Certification in one or more of the following is desirable: ITIL, COBIT, CISA, CISM,CSA, TOGAF, CGEIT, ISO 270000, Six Sigma Black Belt / Green Belt, Program Management
- Very good communication and interpersonal skills
- Excellent writing skills with ability to draft / edit a variety of written reports and other technical documents and articulate ideas clearly and concisely.
To apply or for a confidential chat, please send your cv to thorbjorn.bengtson@emeraldzebra.cy