Senior Regional Security Analyst
Hace 4 días
Madrid, Comunidad de Madrid, España
Verisure
Jornada completa
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Overview In this role, you support governance, risks, and vulnerabilities programs to strengthen information security and IT controls. You will collaborate with cross-functional teams to implement security strategies and maintain control frameworks. You lead security assessments, risk management, and audit activities to ensure regulatory compliance and continuous improvement. The position offers a chance to shape security posture across the organization and its partners, in a dynamic, international setting. Responsabilidades
* Act as local Security POC for Country and Regional teams incidents and requests, coordinating with InfoSec groups to remediate
* Influence decision making through security-architecture collaboration with stakeholders
* Assist Regional InfoSec, Security Architecture & Engineering and IT Ops to implement security projects and targets
* Maintain and develop risk control frameworks and processes for effective monitoring, management, and mitigation
* Perform risk assessments and manage risks across the organization and vendors, driving standardization of control practices
* Develop security standards, procedures, policies, and improve security posture via process automation and capability evolution
* Automate and monitor information security and IT controls, exceptions, risks, vulnerabilities, testing across data activities and entities
* Lead and control the full audit cycle for information security and IT controls, ensuring compliance with directives and regulations Requisitos principales
* Bachelor in Computer Information Systems or related discipline
* ~5 years experience as system administrator (Linux or Windows)
* ~2 years direct experience in information security focusing on risk analysis
* Experience defining and executing risk control frameworks for internal and third-party partners
* Experience conducting information security assessments and working with international standards
* Ability to manage risks, vulnerabilities, and non-conformities with remediation
* KPIs/KRIs reporting for varied stakeholders
* Experience with audits (internal, external, third-party) and remediation planning
* Knowledge of PCI DSS, SOC 2, NIST, GDPR, COBIT, ITIL, etc.
* Fluent English communication; travel availability
* Proficiency with MS Office, at least one GRC tool
* Knowledge of IAM (Microsoft Entra-ID), vulnerability management, and business continuity
* Experience with Windows/Azure and/or Linux and AWS
* Familiarity with security tools (WAF, NACs, EDR)
* Auditing and evidence compilation for audit responses
* Problem solving
* Effective communication
* Team player
* IAM in Microsoft platform (Entra-ID)
* Windows/Azure
* Linux
* Act as local Security POC for Country and Regional teams incidents and requests, coordinating with InfoSec groups to remediate
* Influence decision making through security-architecture collaboration with stakeholders
* Assist Regional InfoSec, Security Architecture & Engineering and IT Ops to implement security projects and targets
* Maintain and develop risk control frameworks and processes for effective monitoring, management, and mitigation
* Perform risk assessments and manage risks across the organization and vendors, driving standardization of control practices
* Develop security standards, procedures, policies, and improve security posture via process automation and capability evolution
* Automate and monitor information security and IT controls, exceptions, risks, vulnerabilities, testing across data activities and entities
* Lead and control the full audit cycle for information security and IT controls, ensuring compliance with directives and regulations Requisitos principales
* Bachelor in Computer Information Systems or related discipline
* ~5 years experience as system administrator (Linux or Windows)
* ~2 years direct experience in information security focusing on risk analysis
* Experience defining and executing risk control frameworks for internal and third-party partners
* Experience conducting information security assessments and working with international standards
* Ability to manage risks, vulnerabilities, and non-conformities with remediation
* KPIs/KRIs reporting for varied stakeholders
* Experience with audits (internal, external, third-party) and remediation planning
* Knowledge of PCI DSS, SOC 2, NIST, GDPR, COBIT, ITIL, etc.
* Fluent English communication; travel availability
* Proficiency with MS Office, at least one GRC tool
* Knowledge of IAM (Microsoft Entra-ID), vulnerability management, and business continuity
* Experience with Windows/Azure and/or Linux and AWS
* Familiarity with security tools (WAF, NACs, EDR)
* Auditing and evidence compilation for audit responses
* Problem solving
* Effective communication
* Team player
* IAM in Microsoft platform (Entra-ID)
* Windows/Azure
* Linux