We’re looking for a...

Information Security Officer

Bucharest, Romania
Employee
IT / Software

For one of our clients, a bank with German origins, we are looking for a Information Security Officer.

Tasks

  • Contributes to the development, implements and reviews the policies and procedures regarding information security, BCP and information classification;
  • Actively participates during the implementation of new processes/systems or business initiatives, advising on information security risks and proposes control measures to reduce the risks;
  • Information security incident management;
  • Facilitates the Business Impact Analysis – participate in BIA by interviewing the departments on updates to process MTO, system RTO/RPO’s;
  • Business Continuity Testing and Plan update – reviewing the plan and the report, supporting the analysis and testing, follow-up the findings;
  • Access rights management, i.e. reviewing access rights on a periodical basis, approval of non-standard access requests;
  • Regularly monitors the security systems – Monitor events from SIEM/Log management solution, Network and System security devices;
  • Reviews malware protection status and malware activity alerts;
  • Regularly reviews the core system device configurations and suggests security improvements;
  • Participates in the periodic assessment of IT systems and the risks associated with information security;
  • Provides support during internal or external audit sessions, including Penetration Tests for the Bank’s applications.

Requirements

  • University degree in Computer Science, Economics, Finance / Accounting or certifications in the field of information security (CISSP, CISM, CISA, etc.);
  • Knowledge of the family of standards ISO 27000, PCI DSS, ISO 22301;
  • Knowledge and skills in the fields: Active Directory, Windows servers, networking (WAN, IDS / IPS, firewalls), SIEM / log management, antivirus, end point protection, backup technologies;
  • Previous professional experience in risk management is an advantage;
  • Knowledge of national regulation (issued by the NBR) and European (guidelines / standards issued by the EBA) on risk management / information security is an advantage;
  • Knowledge of national and European regulations on personal data protection (GDPR) is an advantage;
  • MS Office operating skills - working with Excel, Access at advanced level;
  • Ability to work in a team;
  • Ability to understand economic / banking terminology;
  • Very good command of English language.

For one of our clients, a bank with German origins, we are looking for a Information Security Officer.

Tasks

  • Contributes to the development, implements and reviews the policies and procedures regarding information security, BCP and information classification;
  • Actively participates during the implementation of new processes/systems or business initiatives, advising on information security risks and proposes control measures to reduce the risks;
  • Information security incident management;
  • Facilitates the Business Impact Analysis – participate in BIA by interviewing the departments on updates to process MTO, system RTO/RPO’s;
  • Business Continuity Testing and Plan update – reviewing the plan and the report, supporting the analysis and testing, follow-up the findings;
  • Access rights management, i.e. reviewing access rights on a periodical basis, approval of non-standard access requests;
  • Regularly monitors the security systems – Monitor events from SIEM/Log management solution, Network and System security devices;
  • Reviews malware protection status and malware activity alerts;
  • Regularly reviews the core system device configurations and suggests security improvements;
  • Participates in the periodic assessment of IT systems and the risks associated with information security;
  • Provides support during internal or external audit sessions, including Penetration Tests for the Bank’s applications.

Requirements

  • University degree in Computer Science, Economics, Finance / Accounting or certifications in the field of information security (CISSP, CISM, CISA, etc.);
  • Knowledge of the family of standards ISO 27000, PCI DSS, ISO 22301;
  • Knowledge and skills in the fields: Active Directory, Windows servers, networking (WAN, IDS / IPS, firewalls), SIEM / log management, antivirus, end point protection, backup technologies;
  • Previous professional experience in risk management is an advantage;
  • Knowledge of national regulation (issued by the NBR) and European (guidelines / standards issued by the EBA) on risk management / information security is an advantage;
  • Knowledge of national and European regulations on personal data protection (GDPR) is an advantage;
  • MS Office operating skills - working with Excel, Access at advanced level;
  • Ability to work in a team;
  • Ability to understand economic / banking terminology;
  • Very good command of English language.
Didn’t find what you were looking for?
Updated: 5 hours ago
Job ID: 1961718
About coverletter.ro
-
11-50 employees
Information Technology (IT)
Bucharest, România
Bucharest, România
Show map
Our other open positionsView all open positions
coverletter.ro logo
Reporting Developer
Bucharest, RomaniaEmployee
coverletter.ro logo
.NET Full Stack Developer
Bucharest, RomaniaEmployee
coverletter.ro logo
Identity and Access Security Expert
Bucharest, RomaniaEmployee
coverletter.ro logo
Suport IT Aplicații - 200 Euro/zi
Bucharest, RomaniaEmployee
coverletter.ro logo
Java Developer Cyberfraud & Security
Cluj-Napoca, RomaniaEmployee
Interested in this job?
avatar
Contact Person
Gabriel Zgovancu
IT Recruiter
+41
Documents:
.doc, .docx, .pdf, .rtf, .txt
No time? Just apply later
Enter your info below to get a link to this job.
We hire with
JOIN