Mission

• Responsible for reducing information security risk by defining and implementing risk reduction measures
• Responsible for the implementation of the "Information Security Policy"
• Defines standards and work instructions related to information security
• Defines and implements information security processes and ensures their compliance, contributing to improving the maturity level of IT security
• Responsible for fulfilling all IT security documentation related to IT DRS system
• Periodic review of user rights in accordance with the requirements of application owners.
• Responsible for creating and updating procedures related to security information management
• Performs the planning and analysis phase from the point of view of information security in the application development process
• Responsible for implementing security controls in accordance with the company policies
• Responsible for monitoring the implementation of IT security standards
• Participate to security testing of the new IT DRS solutions
• Responsible for defining security monitoring requirements based on data classification, analyzing the impact of the information on the company's threat analysis / vulnerabilities / security controls
• Performs checks of the security system configurations existing in the company infrastructure or outsourced
• Develops information security awareness and IT Security training programs to drive changes in staff behavior and reduce overall risk to the organization
• Identifies potential risks and frauds to the IT DRS system and proposes solutions to reduce risks
• Manages the common set of information security compliance policies and other technical and procedural documentation and promotes ongoing regulatory awareness
• Create monthly security reports
• Performs advanced monitoring of events related to information security, investigates and analyzes the causes that generated these incidents for the companies’ application landscape and security services, in case of security incidents
• Responsible for defining the rules and managing the data loss prevention
• Responsible for defining information security requirements for projects
• Provide information security guidance to project managers and programmers in accordance with information security standards, industry standards and best practices
• Investigate and report security policy violations and suspicious actions or events
• Responsible for the daily monitoring, identification and investigation and reporting of security events related to attacks or malicious behavior within companies’ systems and networks that process, store and transmit company’s data

Profile

• University degree (technical preferred)
• Relevant IT background allowing understanding of the information technology and IT security area
• Minimum 5 years’ experience in cybersecurity
• Network Information security knowledge
• Information Security Risk knowledge
• Knowledge of SIEM tools (such as Splunk, Sentinel, etc.), scanning tools (Nessus, Qualys, etc.), and PAM tools
• Have knowledge of industry standards and frameworks such as OWASP, NIST, MITRE ATT&CK, etc.
• ITIL Foundation Certification
• English language – Advanced
• Certifications: preferable CompTIA Security+, CISSP, CCSP

Organization

Our Mission Statement
Digital and human resources at the center of the sustainable development of our society.In a world of continuous transformation, accelerated by technological developments and societal challenges, it is necessary to adapt in an ongoing, agile way to meet the challenges of the future.

About Inetum, Positive digital flow:
Inetum is a digital services and solutions company. With a presence in more than 27 countries, the Group has nearly 28,000 employees and generated a revenue of 2.4 billion euros in 2022. In a context where needs and uses are constantly being reinvented, the Inetum Group supports companies and governments in their digital transformation by offering them a unique combination of proximity, sector-specific organization, and innovative solutions. With its multi-specialist profile, Inetum aligns its organization around 4 Global Business Lines: Inetum Consulting, Inetum Technologies, Inetum Solutions, and Inetum Software.