Cybersecurity: Governance, Risk and Compliance Specialist

System operacyjny, Windows

Twój zakres obowiązków, Monitor user access to IT systems by performing the following: Semiannual access reviews, Termination validation procedures, IT Privilege access reviews, Validate that access to critical functions within key applications is appropriately segregated (Segregation of Duties – SOD), Establish effective communication processes with the business and regional IT teams to coordinate the global assessment of IT controls, Integrally engage in projects making sure that they comply with O-I policies and security requirements, Assist with independent vulnerability assessment and SoX audit processes, Follow documented procedures and retain necessary audit documentation, Participate in the incident response activities in accordance with established procedures, Develop and support IT Governance processes, Develop and support IT Risk Management processes, Develop and support IT Compliance processes, Assessing applications, vendors, and processes from a Cybersecurity and Privacy perspective, Work with the IT and Legal teams to ensure compliance with regulations (SoX, GDPR, DOL, etc).

Bachelor’s degree in information technology or legal or equivalent years of experience, Understanding of security frameworks (NIST), and regulatory requirements – governance, risk management, privacy, and data security, Understanding of security protocols and standards, Solid knowledge of information security principles, practices, Minimum 3 years of experience working in Information Technology/IT and Data Governance, IT Risk Management, IT Compliance, Minimum 3 years of experience working with IT general computer control evaluations, remediation, and with external auditors, Intermediate knowledge related to privacy assessment (GDPR), Understanding of the industry’s control frameworks and leading practices, Experience in evaluating system security requirements, Knowledge of system functions, security policies, technical security safeguards, and operational security measures, Knowledge of industry-leading practices, security frameworks, policies, and standards, Intermediate operational knowledge of ServiceNow, Intermediate operational knowledge of SAP GRC, Ability to determine priorities, makes discretionary decisions and determines when to notify management, Ability to work well with people from many different disciplines with varying degrees of technical experience, Experience in communicating and presenting to a management-level audience, Organized, responsive, and highly thorough problem solver, Detail oriented, Demonstrated analytical capabilities, Self-starter and strong collaboration skills, Experience in effective communication with customers, employees, and management, Have high integrity and be able to maintain the confidentiality of work performed, Must be able to communicate in English – both written and verbal.

Mile widziane, ISACA Certified Information Security Manager (CISM), ISACA Certified in Risk & Information System Controls (CRISC), ISACA Certified in the Governance of Enterprise IT (CGEIT), (ISC)2 Certified Information Systems Security Professional (CISSP).

To oferujemy, Necessary for work tools, Co-financing for private medical care, life insurance, sports card, Integration meetings and trips, Additional days off.

Benefity, dofinansowanie zajęć sportowych, prywatna opieka medyczna, ubezpieczenie na życie, zniżki na firmowe produkty i usługi, spotkania integracyjne, kawa / herbata

INNERGO Systems Spółka z o.o., INNERGO to firma zbudowana w 100% w oparciu o polski kapitał. Działamy na rynku integratorów IT od 2009 roku i zatrudniamy obecnie ponad 150 osób., , Od początku działania firmy postawiliśmy sobie za cel realizacje zaawansowanych technologicznie projektów integracji teleinformatycznej, łącząc ofertę światowej klasy producentów z szerokim portfolio własnych usług. Odegraliśmy kluczową rolę w transformacji cyfrowej wielu firm, realizując ponad 2000 projektów, dla klientów z różnych branż., , Zakres wdrożeń realizowanych przez INNERGO:, - sieci LAN i WLAN, MPLS, SD WAN, Wi-Fi, - systemy telekomunikacyjne klasy Enterprise, - platformy serwerowe i macierzowe, - infrastruktura pasywna serwerowni, - wdrożenia systemów z zakresu cyberbezpieczeństwa, - dostawy i serwis urządzeń Apple, - serwis gwarancyjny i pogwarancyjny, - prywatne sieci 5G i LTE, - rozwiązania klasy Connected City, - aplikacje z wykorzystaniem platform „no-code“