Cybersecurity: Governance, Risk and Compliance Specialist

INNERGO to firma zbudowana w 100% w oparciu o polski kapitał. Działamy na rynku integratorów IT od 2009 roku i zatrudniamy obecnie ponad 150 osób.

Od początku działania firmy postawiliśmy sobie za cel realizacje zaawansowanych technologicznie projektów integracji teleinformatycznej, łącząc ofertę światowej klasy producentów z szerokim portfolio własnych usług. Odegraliśmy kluczową rolę w transformacji cyfrowej wielu firm, realizując ponad 2000 projektów, dla klientów z różnych branż.

Zakres wdrożeń realizowanych przez INNERGO:

• sieci LAN i WLAN, MPLS, SD WAN, Wi-Fi
• systemy telekomunikacyjne klasy Enterprise
• platformy serwerowe i macierzowe
• infrastruktura pasywna serwerowni
• wdrożenia systemów z zakresu cyberbezpieczeństwa
• dostawy i serwis urządzeń Apple
• serwis gwarancyjny i pogwarancyjny
• prywatne sieci 5G i LTE
• rozwiązania klasy Connected City
• aplikacje z wykorzystaniem platform „no-code“

JOIN INNERGO AS:

Cybersecurity: Governance, Risk and Compliance Specialist

Poznań / Warszawa / Kraków / Wrocław / Rzeszów / Krosno / Gdynia / Remote

JOB FUNCTIONS:

• Monitor user access to IT systems by performing the following: Semiannual access reviews, Termination validation procedures, IT Privilege access reviews
• Validate that access to critical functions within key applications is appropriately segregated (Segregation of Duties - SOD)
• Establish effective communication processes with the business and regional IT teams to coordinate the global assessment of IT controls
• Integrally engage in projects making sure that they comply with O-I policies and security requirements
• Assist with independent vulnerability assessment and SoX audit processes
• Follow documented procedures and retain necessary audit documentation
• Participate in the incident response activities in accordance with established procedures
• Develop and support IT Governance processes
• Develop and support IT Risk Management processes
• Develop and support IT Compliance processes
• Assessing applications, vendors, and processes from a Cybersecurity and Privacy perspective
• Work with the IT and Legal teams to ensure compliance with regulations (SoX, GDPR, DOL, etc).

POSITION REQUIREMENTS:

• Bachelor’s degree in information technology or legal or equivalent years of experience
• Understanding of security frameworks (NIST), and regulatory requirements - governance, risk management, privacy, and data security
• Understanding of security protocols and standards
• Solid knowledge of information security principles, practices
• Minimum 3 years of experience working in Information Technology/IT and Data Governance, IT Risk Management, IT Compliance
• Minimum 3 years of experience working with IT general computer control evaluations, remediation, and with external auditors
• Intermediate knowledge related to privacy assessment (GDPR)
• Understanding of the industry’s control frameworks and leading practices
• Experience in evaluating system security requirements
• Knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Knowledge of industry-leading practices, security frameworks, policies, and standards
• Intermediate operational knowledge of ServiceNow
• Intermediate operational knowledge of SAP GRC
• Ability to determine priorities, makes discretionary decisions and determines when to notify management
• Ability to work well with people from many different disciplines with varying degrees of technical experience
• Experience in communicating and presenting to a management-level audience
• Organized, responsive, and highly thorough problem solver
• Detail oriented
• Demonstrated analytical capabilities
• Self-starter and strong collaboration skills
• Experience in effective communication with customers, employees, and management
• Have high integrity and be able to maintain the confidentiality of work performed
• Must be able to communicate in English - both written and verbal.

ADDITIONAL QUALIFICATIONS:

• ISACA Certified Information Security Manager (CISM)
• ISACA Certified in Risk & Information System Controls (CRISC)
• ISACA Certified in the Governance of Enterprise IT (CGEIT)
• (ISC)2 Certified Information Systems Security Professional (CISSP).

WE OFFER:

• Necessary for work tools
• Co-financing for private medical care, life insurance, sports card
• Integration meetings and trips
• Additional days off.