IT Security Manager at Headquarters

In Accace, WE DO what we love and WE LOVE what we do. This is also the reason why our company is one of the fastest growing consultancy and outsourcing companies in our region

We want to be the employer of choice for talented people and currently, we are looking for IT security professional who has experience with IT audits and is ready to showcase his/her skills and manage the whole IT security area.

The overall satisfaction of our colleagues, an informal friendly environment and the desire to create are key for us

If you are looking for a challenge, you are not afraid of a multi-culture environment and want to help us move forward, then this is a great opportunity for you.

Key responsibilities

• System administration to ensure information security management according to ISO-IEC 27001 (hereafter ISMS), compliance monitoring
• ISMS documentation maintenance and cooperation in the creation and maintenance of an integrated management system
• Proposal of actions/measures for improvement of information security within the company as well towards the suppliers
• Active cooperation with internal Accace units within their field of operation, which are related to information security
• Enforcement of compliance with ISMS principles in the technical area – in the creation, configuration, and deployment of IS, including a proposal of a solution
• Enforcement of compliance with ISMS principles n user area – in the practical use of IS
• Providing support and awareness development about information security and cooperation in content creation for internal education
• Cooperation in the preparation and execution of ISMS audits
• Providing inputs for external supplier contracts related to ISMS.
• Providing inputs related to information security and compliance to ISMS standards to Accace customers
• Coordinate development, maintenance, and implementation of business continuity and disaster recovery strategies and solutions.
• Support business leaders in risk assessment and BIAs, selecting strategies to mitigate identified risks.

Requirements

• Experience in a similar position for at least 5 years
• Knowledge of English at advanced level (C1)
• analytical thinking and good communication skills
• Initiative approach when solving tasks
• Integrity and honesty
• Pleasant demeanor and professional behavior
• Ability to work with professional written documentation in English
• Basic knowledge of other security standards such as: ISO/IEC 27001, ISO 20000-1 ITSM/ITIL, ISO 22301 BCMS PCI DSS, CIS, NIST SP 800-64, HIPAA, SIEM, MS Azure Cloud Security…
• Basic IT Technical Skills:
  • Practices and methods of IT strategy – Advanced
  • Enterprise architecture and security architecture
  • ISO 27001/27002, ITIL and COBIT frameworks
  • Windows, UNIX and Linux operating systems
  • Firewall and intrusion detection/prevention protocols, Secure coding practices, ethical hacking and threat modeling, TCP/IP, computer networking, routing and switching, Network security architecture development and definition
  • Third party auditing and MS Azure Cloud risk assessment methodologies

What we offer