Cyber and Digital Security Expert

**Position Snapshot**:
In order to complete our Security & Compliance Department, we are currently looking for a Digital Physical Security Expert.

**Position Summary**:
In this position, you are responsible for establishing and maintaining security products, platforms and solutions designed to mitigate IS/IT risks across Nestlé Group to ensure that information assets are adequately protected. You are responsible for the identification, evaluation and reporting of information security risks in a manner that meets compliance and regulatory requirements, aligning with and supporting the risk posture of the enterprise. You are required to deliver vision with strong skills in business management and a working knowledge of information security technologies. You will proactively work with IS/IT and business units to implement practices and technologies that meet defined policies and standards for information security.

**A day in the life of...**:

- Maintain a business partnership relationship with the global Physical Security team to offer Digital Physical Security solutions to meet business requirements
- Serve as an expert in the relevant technologies and provide architectural and deployment support to business units
- Directly contribute to strategy and development of Digital Physical Security solutions
- Ensure that Digital Physical solutions are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
- Determine security requirements by evaluating business strategies and requirements following a risk-based approach, specifically for Physical Security solutions provided as a service
- Provide a market watch of upcoming technologies and investigate viability for use within the enterprise
- Liase with IT teams and vendors to implement, improve and solve operational issues.
- Supports the implementation and enforcement of secure design principles according to policies, standards, and patterns of Information Security.
- Drive the development and implementation of standard security review processes that result in effective methods for reducing security risks before product releases.
- Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices.

**What will make you successful**:

- Degree in business administration or a technology-related field, or equivalent work
- or education - related experience
- 5+ years of experience in a combination of risk management, information security and IS/IT jobs related to Digital Physical Security solutions
- Solid experience with access control solutions, security surveillance systems, biomet-rics, building management systems, facial recognition, smart sensors
- Solid experience with access control technologies such as physical access tokens, turn-stiles, contactless technologies such as NFC, RFID, etc
- Solid understanding of security architecture best practices and implementation
- Experience with securing Cloud backends and IoT sensors is advantageous
- Experience determining security requirements by evaluating business strategies and requirements following a risk-based approach
- Excellent ability to analyze functional and technical needs, and describe associated data flows and security controls needed
- Good working knowledge of current IT risks and experience implementing security solutions such as multifactor authentication, single sign-on, identity management or related technologies
- Preference to have worked in a global environment and with virtual teams
- Knowledge and understanding of relevant legal and regulatory requirements, General Data Protection Regulation (GDPR), or relevant local or global laws, standards and regulations
- Professional security management certification, such as a CISSP, CISA, OSCP, GIAC or other similar credentials, is preferred
- Knowledge of common information security management frameworks, such as ISO 27001, IS/ITIL, COBIS/IT and NIST
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences