Security Operations Officer

Service Context

The profile will be part of a team of IT professionals delivering transversal services and will operate within the security and compliance control centre ensuring products alignment with Group Security standards.

The mission requires close collaboration with IT Product teams and the Security Officer with a proactive approach towards overall security on products and leveraging the security posture across the full product life cycle.

The mission will be based in Lisbon.

Scope of Services (but not limited to)

• Ensure overall security coverage for specific Products
• Support the security and compliance control centre in maintaining Products compliance with Group Security standards
• Collaborate with application teams on security requirements definition and security controls implementation
• Organise and support security testing activities
• Own and drive security remediation plans
• Provide overall security support to IT Product teams
• Create and document internal processes
• Organise and facilitate security-relevant meetings

Service Deliverables (but not limited to)

• Documented security requirements and implemented controls per product scope
• Security test plans and associated outcomes
• Security remediation plans with tracked progress
• Internal process documentation aligned with Group Security standards
• Minutes and outcomes of security-relevant meetings

Qualifications :

Required Expertise

Technical Mandatory:

• Solid understanding of information security standards and frameworks (e.g. ISO 2700x)
• Identity and Access Management
• Security Assessment and Testing
• Encryption methods and secure protocols
• Secure Software Development Life Cycle (SSDLC)
• Vulnerability management
• Azure cloud security
• Strong organisational and analytical capabilities
• Ability to operate in complex environments (multi-cultural multi-country geographically distributed)

Technical Valued:

• Data Privacy / GDPR knowledge
• Operational Resilience
• ITIL Framework knowledge

Service Qualifications

• Degree in a relevant field such as Information Security or Computer Science
• Minimum of 7 years of expertise in Information Technology and Information Security
• English: C1 Proficient (Common European Framework of Reference for Languages) interactions conducted in English
• French: knowledge will be valued
• Availability to travel if required by the mission

Remote Work :

No

Employment Type :

Full-time