IT Security Head (Part time)

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an HR Manager to join our team and take ownership of the day-to-day HR operations across our international locations. This is a hands-on, execution-focused position, perfect for someone who enjoys being directly involved in all aspects of HR administration, employee lifecycle management, and compliance.

It is a part-time remote position, approx. 16 hours in month with potential extension to some on-demand projects

What you’ll do

• Evolves an information security vision, strategy and charter that is aligned to organizational priorities
• Directs an information security governance structure, including the formation of an information security steering committee or advisory board
• Develops and maintains a unified, risk-based control framework to integrate and normalize the requirements resulting from global laws, standards and regulations
• Works effectively with business units and functions to facilitate information security risk assessment and risk management processes, and empowers them to own and accept the level of risk they deem appropriate for their specific risk appetite
• Creates the necessary internal networks among information security stakeholders in IT, product development, corporate compliance, audit, physical security, procurement, legal and HR management teams.
• Implements and monitors a strategic, comprehensive information security management framework based on (ISO) 2700X to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets
• Facilitates a metrics and reporting framework to measure the efficiency and effectiveness of the program, providing regular reporting on the current status to enterprise risk teams, senior business leaders and the board of directors
• Understands and interacts with related disciplines, to ensure the consistent application of policies and standards across all technology projects, systems and services
• Oversee the implementation and the use of IT Security technologies relating to key security control areas such as threat and vulnerability management, security monitoring, identity and access management and data loss prevention to ensure an effective use of these technologies in mitigating cyber security risks.
• Execute, improve and report on controls in accordance with internal security standards and regulatory requirements.
• Play an active role in IT projects and operational processes (e.g., change management, exception management) to assess from an IT security standpoint IT projects, changes and exceptions.
• Liaise with stakeholders to ensure long term security strategy objectives are met and controls addressing security risk are regularly monitored and reported
• Perform technical security reviews to ensure technologies are in compliance with information security standards, regulatory requirements and best practices.
• Assist with Data Leakage Prevention (DLP) incidents investigation and the ongoing improvement of the DLP programme
• Coordinate assurance tests (e.g., penetration tests) and issues remediation
• Develop and maintain security documentation including technical security hardening standards, methodologies and procedures
• Perform e-discovery searches and investigations as required
• Assist in the coordination of IT audits

Requirements

• At least 3 years working experience in IT Security.
• Bachelor’s degree in Computer Science or IT Security related fields
• Knowledge of international security standards and frameworks such as NIST, CIS, ISO27001, etc.
• Strong understanding of IT Security architecture concepts, technologies and good security practices
• Self-motivated and delivery focused – the candidate must be able to work independently and switch between several simultaneous projects and effectively prioritise work
• Team playing and communication skills – the candidate must be a team player and able to effectively interact with other team members of TFL IT
• Strong problem solver and good analytical skills

• Willingness to provide a recent criminal record extract (not older than three months).

Benefits

• Broad range of activities, tasks, and projects
• Fishing for Friends program – our referral program
• Further development and professional advancement
• Friendly and international working environment

Is IT in your DNA?

Originally posted on Himalayas