Security Manager with English or German language
Deutsche Telekom IT Solutions Slovakia
- Place of work: Remote work
- Basic wage component (gross) and other rewards: 1 150 EUR/monthFinal salary is negotiable. We are offering base salary depending on seniority level and previous experience of candidate. In addition to base salary we provide variable part and other financial benefits.
- Contract type: full-time
Job description, responsibilities and duties
Purpose
Implementation of the national, corporate or customer security policies and standards into company environment. Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company. Executes ISMS P-D-C-A cycle in his/her area of responsibility.
Key accountabilities
• Implementation of the national, corporate or customer security policies and standards into company environment,
• Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company,
• Acts as main admin with responsibility for proper configuration of respective Security Management systems and applications in his/her area of responsibility
• Develop yearly audit plan and perform internal security audits resulting to audit evidence and mitigation plan,
• Contribution and support to internal/external/customer audits,
• Identification of Security incidents, analysis of the root cause, resolution with stakeholders and evidence,
• Identification of information security risks resulting to mitigation strategy creation. Formalizing of the information security risks in the corporate information security risk management tool ( e.g. ISRM.xls or ISH),
• Gathering IT system-specific information (logs), analysis and measures implementation in case of non-compliance to security rules,
• Continuous operation and improvement of ISMS in his/her respective area of responsibility e.g. IT Security, Physical Security, Business Continuity etc.
• Creation of security related KPIs, provide tracking of KPIs on regular basis including trends, recommendations for improvement
• Initiation and coordination of security projects e.g. security awareness campaign, key consolidation, etc.
Implementation of the national, corporate or customer security policies and standards into company environment. Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company. Executes ISMS P-D-C-A cycle in his/her area of responsibility.
Key accountabilities
• Implementation of the national, corporate or customer security policies and standards into company environment,
• Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company,
• Acts as main admin with responsibility for proper configuration of respective Security Management systems and applications in his/her area of responsibility
• Develop yearly audit plan and perform internal security audits resulting to audit evidence and mitigation plan,
• Contribution and support to internal/external/customer audits,
• Identification of Security incidents, analysis of the root cause, resolution with stakeholders and evidence,
• Identification of information security risks resulting to mitigation strategy creation. Formalizing of the information security risks in the corporate information security risk management tool ( e.g. ISRM.xls or ISH),
• Gathering IT system-specific information (logs), analysis and measures implementation in case of non-compliance to security rules,
• Continuous operation and improvement of ISMS in his/her respective area of responsibility e.g. IT Security, Physical Security, Business Continuity etc.
• Creation of security related KPIs, provide tracking of KPIs on regular basis including trends, recommendations for improvement
• Initiation and coordination of security projects e.g. security awareness campaign, key consolidation, etc.
Requirements for the employee
Candidates with education suit the position
University education (Master's degree)
Language skills
English - Upper intermediate (B2)
Personality requirements and skills
Education
• Information technologies – Master‘s degree
Experience
• Security Management – 3 years
Certification
• Equivalent certification e.g. CISSP, CISA, CISM, Security+, CCNA Security, CEH
IT Technical Skills
• Practices and methods of IT strategy - Advanced
• Enterprise architecture and security architecture
• ISO 27001/27002, ITIL and COBIT frameworks
• Windows, UNIX and Linux operating systems,
• C, C++, C#, Java and/or PHP programming languages
• Firewall and intrusion detection/prevention protocols, Secure coding practices, ethical hacking and threat modeling,TCP/IP, computer networking, routing and switching, Network security architecture development and definition
• Third party auditing and cloud risk assessment methodologies
Soft skills
• Leadership skills
• Communication skills
Languages
• English - Upper intermediate (B2)
Other criteria or requirements
• German - Upper intermediate (B2) - advantage
• Information technologies – Master‘s degree
Experience
• Security Management – 3 years
Certification
• Equivalent certification e.g. CISSP, CISA, CISM, Security+, CCNA Security, CEH
IT Technical Skills
• Practices and methods of IT strategy - Advanced
• Enterprise architecture and security architecture
• ISO 27001/27002, ITIL and COBIT frameworks
• Windows, UNIX and Linux operating systems,
• C, C++, C#, Java and/or PHP programming languages
• Firewall and intrusion detection/prevention protocols, Secure coding practices, ethical hacking and threat modeling,TCP/IP, computer networking, routing and switching, Network security architecture development and definition
• Third party auditing and cloud risk assessment methodologies
Soft skills
• Leadership skills
• Communication skills
Languages
• English - Upper intermediate (B2)
Other criteria or requirements
• German - Upper intermediate (B2) - advantage
Advertiser
Brief description of the company
Our brand Deutsche Telekom IT Solutions Slovakia entered the life of Košice region in January 2006 under the name T-Systems Slovakia and has been inextricably linked with this region ever since. We proved this the very next year, when we became one of the founding members of Košice IT Valley association.
Over the last decade, we have managed to grow from scratch to being the second largest employer in the eastern part of the country. At the same time, with more than 3,900 employees, we are one of the top fifteen largest employers in Slovakia. Thanks to our highly qualified and motivated employees, we are the company with the fastest growth in added value within the IT industry in Slovakia. Our goal is to proactively find new ways to improve and continuously transform into the type of company providing innovative services.
The company under the brand T-Systems Slovakia s.r.o. has defined its mission as follows: "We give IT meaning".
As part of our strategic activities, we are transforming our company into a modern information and communications technology services provider stepping towards a future based on digital technologies. We implement these steps to move our business from a project-driven model (where we supply the required number of IT experts based on our customer's requirements) to an innovative and product-oriented company model (where we supply and manage products and services during their lifecycle at the customer).
We believe that such a transformation can succeed with the right employees who are constantly developing their skills and thus contributing to the professional image of our brand in the market.
Over the last decade, we have managed to grow from scratch to being the second largest employer in the eastern part of the country. At the same time, with more than 3,900 employees, we are one of the top fifteen largest employers in Slovakia. Thanks to our highly qualified and motivated employees, we are the company with the fastest growth in added value within the IT industry in Slovakia. Our goal is to proactively find new ways to improve and continuously transform into the type of company providing innovative services.
The company under the brand T-Systems Slovakia s.r.o. has defined its mission as follows: "We give IT meaning".
As part of our strategic activities, we are transforming our company into a modern information and communications technology services provider stepping towards a future based on digital technologies. We implement these steps to move our business from a project-driven model (where we supply the required number of IT experts based on our customer's requirements) to an innovative and product-oriented company model (where we supply and manage products and services during their lifecycle at the customer).
We believe that such a transformation can succeed with the right employees who are constantly developing their skills and thus contributing to the professional image of our brand in the market.
Number of employees
1000 and more employees