Role and responsibilities
Se è interessato/a a candidarsi per questo lavoro, la preghiamo di assicurarsi di soddisfare i seguenti requisiti, elencati di seguito.
We are looking for a mid-level Cyber Security Specialist to join our Security team. Reporting directly to the Security Manager, this role will be pivotal in governing the company's defence infrastructure and overseeing compliance and data protection processes.
The ideal candidate has a solid technical foundation and a pragmatic approach to supporting Governance, Risk & Compliance (GRC) processes. They will act as the operational liaison between the company, the external Security Service Providers and internal IT stakeholders, balancing technical operations with document and regulatory management.
Oversee and monitor key corporate security controls (XDR/EDR, Email Security Gateway, MDM, DNS Protection, DLP) and manage Level 2 activities through ITSM/Ticketing systems.
Support the Security Manager in defining, implementing, and monitoring security policies, standards, and procedures, ensuring compliance with frameworks and regulations such as ISO 27001, NIST, and GDPR.
Coordinate operational activities with MSSPs and internal stakeholders, manage escalated alerts, and support Incident Response activities, including remediation tracking.
Support Vulnerability Management activities by analysing scan results, prioritising risks, and monitoring patching and remediation activities following Penetration Tests or Threat Hunting exercises.
Contribute to GRC and Third‐Party Risk Management activities, including reviewing Security Policies and SOPs, assessing vendors, and monitoring supply chain security posture.
Support internal/external audits and assist in collecting the required documentation for compliance assessments and customer security reviews.
Promote cybersecurity awareness across the organization through training initiatives, phishing simulation campaigns, and tracking employee and contractor participation