Information Security Specialist

Sobre a vaga

Join the global Intellias team to develop top-of-the-line solutions for the world’s leading FinTech companies. You will work with 360 Treasury Systems AG (360T AG), Deutsche Börse Group’s FX unit, providing web-based trading technology for over-the-counter instruments. The role involves maintaining security frameworks and advising product teams on secure architecture.

O que vais fazer

• Maintain and enhance our ISO 27001:2022 ISMS and policy framework
• Oversee and maintain compliance with DORA provisions concerning ICT risk governance and third-party risk oversight
• Run risk analyses in line with regulations, best practices, Three-Lines-of-Defence model
• Security-by-Design Reviews: Advise product teams on secure architecture, zero-trust networking and segregation of duties
• Control Lifecycle: Define, monitor and improve technical controls (vulnerability management, hardening baselines, privileged access) together with Development, Infrastructure, and SecOps teams
• Tooling Strategy: Manage and optimise threat intelligence, security event monitoring, intrusion detection, deception, and related platforms to maintain effective coverage, efficiency, and automation
• Manage the NIST-aligned lifecycle (prepare, detect, contain, eradicate, recover, lessons learned)
• Use threat intelligence, vulnerability reports, and similar news sources to assess changes in landscape, threats, and best practices, and provide thoughtful, innovative, and practical guidance to improve our processes and systems
• Coordinate regular cybersecurity exercises to test security controls, incident response processes, and operational resilience, driving continuous improvement

O que é pedido

• University degree in computer science or a comparable education
• 3+ years of experience in the IT security domain
• Working knowledge in implementing and maintaining security certifications (eg ISAE3402, SOC1, SOC2, ISO2700x etc) and maintaining compliance to international security standards
• Experience in the development of practical security processes, policies and standards and management of information security issues and incidents
• Track record of taking responsibility, working independently and without much supervision
• Highly motivated to learn about new topics, technologies, and business cases
• Proficient in spoken and written English is mandatory

Valorizado

• Certifications are a plus (CISSP, CRISC, CISM, ISO27001 Lead Implementer or Auditor)
• German language skills are a plus

Resumo organizado por IA a partir do anúncio original. Confirma os detalhes no site da empresa.