Senior Grc Security Engineer

hace 3 semanas

Madrid, España Sgs Société Générale De Surveillance Sa. A tiempo completo

We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.
Job Description

The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.
Specific responsibilities:
Implementation and monitoring of security controls: manage the technical security architecture of the organization, implement protective measures, and ensure their effectiveness across the IT environment.
Development of security policies and procedures: create, review, and update security policies, procedures, and hardening guides to ensure regulatory compliance and best practices.
Support for customer assessments: provide support for customer-requested security evaluations, ensuring alignment with the organization's security standards.
Management of security exceptions: evaluate, manage, and document security exception requests, ensuring associated risks are appropriately controlled.
Support to business and IT on security requirements: advise business and IT areas on matters related to information security requirements, ensuring that controls are effective and integrated into operational processes.
Support for third-party audits: Collaborate on external and internal audits, including ISO 27001 certification audits, financial audits, ITGC (IT General Controls), and other compliance reviews related to information security.
Projects: security assessments, findings, product evaluations, propositions for further system security enhancement & S-SDLC.
Compliance and audits: Ensure compliance with information security regulations (ISO 27001, GDPR, NIST, NIS2, IA EU Act, etc.) and assist in internal and external audits.
Governance and risk management: participate in the development and review of security policies, as well as in the identification, assessment, and mitigation of cybersecurity risks.
Evaluation of security technologies: participate in the assessment of security technologies, identify and define system and security requirements, baselines and controls for both the existing environment and new developments in IT infrastructure.
Collaboration across departments: work with IT, Development, Business lines and Human Resources departments to ensure that security controls are effective and that policies are correctly applied.
Business continuity: design and document business continuity strategies to minimize disruptions in operations due to unforeseen incidents, such as cyber-attacks, natural disasters, or system failures, ensure BCP aligns with organizational risk management strategies and regulatory requirements.
Training and security awareness: select training content and lead awareness campaigns. Organize controlled phishing tests for employees to assess and improve the organization's security culture.
Dashboards creation and KPI tracking: develop security dashboards and monitor key security performance indicators (KPIs) to track the effectiveness of security controls and identify areas for improvement.
Ensure policies help meet compliance with regulatory requirements, including but not limited to ISO27001, GDPR, SOC2, etc.
Conduct assessments to identify gaps and make sound recommendations for improvement. Identify acceptable levels of residual risk, and assist with action plans, policy and procedural changes for risk mitigation.
Conduct and monitor the enterprise security awareness program, monitoring for compliance across the organization.
Prepares documentation, presentations and reports for management.
Leads discussions with management regarding policy effectiveness and prepares reports to management communicating results including recommendations to IT Policies to help improve technology and business practices.
Qualifications

The ideal person enjoys security work and possesses expertise in the security space, both in depth and in width. Should be quite confident, very curious, extremely open minded and eager to learn and grow in the cyber security area.
Qualifications & soft skills
Bachelor's degree in computer information systems, Information Technology or related field;
Certifications in information security (CISSP, CISM, ISO 27001 Lead Auditor/Implementer, CRISC) are highly desired;
At least 3-5 years of experience in a similar information security role, preferably within a technical or internal security office environment;
Advanced knowledge of cybersecurity regulations: Experience with frameworks such as ISO 27001, NIST, PCI-DSS, GDPR, among others. Ability to manage compliance audits and GRC (Governance, Risk, and Compliance) reporting;
Lead Auditor 27001, CISA, CISSP qualifications would be desirable;
Technical knowledge of network, databases and operating system security and understanding of the latest security principles, techniques, concepts and protocols;
Training and awareness in security governance, risk, and compliance;
Knowledge in the following areas: operating systems, applications, operations (batch processing, monitoring) networking and telecommunications, databases, and logical security;
Ability to work independently as well as being a team player, in a fast-paced and international environment;
Ability to manage multiple projects concurrently and work under pressure;
Strong problem solving and innovative and critical thinking;
Fluent in English; knowledge of other languages would be a plus;
Proficient in MS Office tools (Excel, Word, PowerBi etc.).
Additional Information

This position is based in our office in Madrid and is an excellent entry point into SGS and will open up opportunities to career development within the Group.

#J-18808-Ljbffr

  • Senior Security Engineer

    hace 5 meses

    Madrid, España Back Market A tiempo completo

    .Back Market is the world's leading refurbished electronics marketplace with a team of more than 650, powering operations in 16 countries (and counting!).Back Market is undergoing meteoric growth and has raised $884 million, with a valuation of $5.7 billion. Our mission is simple: empowering people to buy tech sustainably by offering folks a high-quality,...

  • Senior Grc Security Engineer |

    hace 3 días

    Madrid, España Sgs A tiempo completo

    .Job DescriptionThe Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.Specific responsibilities:Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    .Company DescriptionWe are SGS - the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.Job DescriptionThe Senior...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    .SGSEnhancing warfighter support with AI: Streamlining sustainment and supply, empowering personnel, and informing leadership decisions.We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices...

  • Senior Grc Security Engineer

    hace 1 semana

    Madrid, España Sgs A tiempo completo

    .SGS Enhancing warfighter support with AI: Streamlining sustainment and supply, empowering personnel, and informing leadership decisions. We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs Société Générale De Surveillance Sa. A tiempo completo

    .We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.Job DescriptionThe Senior GRC Security...

  • Senior Grc Security Engineer

    hace 2 semanas

    Madrid, España Sgs A tiempo completo

    .Company DescriptionWe are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.Job DescriptionThe Senior...

  • Senior Grc Security Engineer

    hace 4 semanas

    Madrid, España SGS A tiempo completo

    **Company Description** We are SGS - the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.** The** Senior GRC...

  • Senior Grc Security Engineer

    hace 4 semanas

    Madrid, España Sgs A tiempo completo

    Job DescriptionThe Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.Specific responsibilities:Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    Job DescriptionThe Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.Specific responsibilities:Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior Grc Security Engineer

    hace 2 semanas

    Madrid, España Sgs A tiempo completo

    Job DescriptionThe Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.Specific responsibilities:Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior Grc Security Engineer

    hace 4 semanas

    Madrid, España Sgs A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.  Specific responsibilities: Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.  Specific responsibilities: Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior GRC Security Engineer

    hace 3 semanas

    Madrid, España SGS A tiempo completo

    SGSEnhancing warfighter support with AI: Streamlining sustainment and supply, empowering personnel, and informing leadership decisions.We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    SGSEnhancing warfighter support with AI: Streamlining sustainment and supply, empowering personnel, and informing leadership decisions.We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices...

  • Senior Grc Security Engineer

    hace 2 semanas

    Madrid, España Sgs A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization's assets, ensuring regulatory compliance, and managing cyber risk.  Specific responsibilities: Implementation and monitoring of security controls: manage the technical security architecture of the...

  • Senior GRC Security Engineer

    hace 2 semanas

    Madrid, España SGS A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization’s assets, ensuring regulatory compliance, and managing cyber risk. Specific responsibilities: Implementation and monitoring of security controls: manage the technical security...

  • Senior GRC Security Engineer

    hace 4 semanas

    Madrid, España SGS A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization’s assets, ensuring regulatory compliance, and managing cyber risk. Specific responsibilities: Implementation and monitoring of security controls: manage the technical security...

  • Senior GRC Security Engineer

    hace 3 semanas

    Madrid, España SGS A tiempo completo

    Job Description The Senior GRC Security Engineer will be part of the Technical Security Office (TSO) and will play a critical role in protecting the organization’s assets, ensuring regulatory compliance, and managing cyber risk. Specific responsibilities: Implementation and monitoring of security controls: manage the technical security...

  • Senior Grc Security Engineer

    hace 3 semanas

    Madrid, España Sgs A tiempo completo

    Company DescriptionWe are SGS - the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world.Job DescriptionThe Senior GRC...