ICT Security Specialist

We are the 1st Hub for Developers! Our motto is “From Developers to Developers”! Our vision is to provide real career opportunities for candidates that want to take the next step in their career. Code.Career is the first process that you will speak with developers (only!) and tech (freak) experts!

Our client is a leading company in the oil and gas sector and currently seeking a ICT Security Specialist.

Job Description

The ICT Security Specialist will be responsible for overseeing and monitoring the organization’s cyber security tools, the preparations for security frameworks and audits as well as active engagement throughout the remediation process. This role requires a strong technical background in cybersecurity, combined with experience on frameworks like ISO 27001 and PCI-DSS.

Responsibilities:

• Audit Engagement: Active involvement in IT audits as well as ongoing compliance with ISO 27001 (Information Security Management), ISO 22301 (Business Continuity Management Systems) and PCI-DSS (Payment Card Industry Data Security Standard).
• Cybersecurity Infrastructure: Enforce the appropriate technical and organizational measures to ensure optimal protection of organizational assets, including business data (at-store, in-transit, and in-use). Ensure that user access to the organization’s resources is monitored, reviewed, and appropriate.
• Technical Project Management: Oversee and manage cybersecurity-related projects and ensure the timely delivery of security improvements. Manage external vendors and third-party service providers to meet security standards and contractual obligations.
• Risk Management: Perform and review risk assessments, security evaluations and vulnerability assessments to identify and mitigate threats to the organization.
• Incident Response: Response to cybersecurity incidents, breaches, and ensure proper recovery procedures are in place, including disaster recovery and business continuity planning.
• Automation: introduce and deploy automation processes throughout the organization related to security alerts.
• Participate to company’s trainings.

Competencies:   

• Minimum of 5 years of experience in cyber/information security.
• Working experience in most of: EDR/XDR/NDR solutions, SIEM, Email Security, WAF, DDoS, PAM, Web Proxy, Cloud Access Security Broker (CASB), DLP(Email/Web/Endpoint), Data Classification, ITSM.
• Solid knowledge of Microsoft Azure and cloud security best practices.
• Extensive experience with IT audits and all the aspects involved in certification/maintenance of security frameworks.
• In-depth knowledge of risk assessment, vulnerability assessment, penetration testing.
• Proven track record of active engagement in cybersecurity projects and leading security projects.
• Strong vendor management skills with experience overseeing third-party security services.
• Communication and decision-making skills.
• Ability to collaborate across departments.

Education Level:

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Master’s degree is preferred.

Special Skills:

• Certifications such as CISSP, CEH, CCNA Security, GSEC are desirable.

Other Skills / Experience:

• Excellent use of English language (written/ verbal)
• Expert in MS Office-Project management tools
• Valid driving license
• Previous experience working in the Energy industry is desirable but not required.