Technical Information Security Officer (TISO) ONSITE

Required Skills:

In the Service Solutions and AI Domain our mission is to revolutionize our Private financial process landscape by implementing holistic front-to-back process automation. We are committed to enhancing efficiency agility and innovation with a keen focus on aligning every step of our process with the customers needs and expectations. Our dedication extends to driving innovative technologies such as AI & workflow services to foster continuous improvement. We aim to deliver best in class solutions across products channels brands and regions thereby transforming the way we serve our customers and setting new benchmarks in the industry. A Technical Information Security Officer (TISO) is responsible for ensuring the security of assigned IT assets including application software databases infrastructure and outsourced IT services. The TISO conducts risk and compliance assessments provides guidance on security requirements approves access control setups and ensures the implementation of necessary security controls. They collaborate with key role holders to develop secure environments perform risk assessments and document risk management activities. Additionally the TISO influences IT risk policies and standards ensuring compliance and mitigating potential security risks. Your key responsibilities As a Technical Information Security Officer (TISO) you will be entrusted with a critical role in ensuring the security of our IT assets. Your key responsibilities include: Ownership and Risk Management: Assume ownership of assigned IT assets including application software databases infrastructure and outsourced IT services. Conduct comprehensive risk and compliance assessments to ensure security measures are in place. Guidance and Implementation: Provide expert guidance to IT Asset Owners (ITAOs) and Information Security Officers (ISOs) on security requirements and the implementation of compensating controls. Ensure security is integrated early in the system development life cycle. Access Control and Authorization: Approve access control setups and user authorization for assigned IT assets. Perform periodic recertification of access rights in compliance with organizational policies. Security Controls: Ensure the implementation of necessary information security controls. Influence and provide feedback on IT risk and control-related policies and standards. Design and oversee the implementation of security measures. Collaboration and Coordination: Work closely with ITAOs and other ISO roles to establish monitoring capabilities for IT assets. Review monitoring outputs to maintain the required security level and advise on remediation of gaps. Incident Management: Contribute to the Information Security Incident Management Process in case of security breaches for assigned IT assets. Documentation and Compliance: Maintain thorough documentation of information security risk management activities including major decisions identified risks and mitigation measures. Ensure compliance with internal policies and standards. Escalation and Conflict Resolution: Serve as the first point of escalation and conflict resolution both internally and with external parties such as regulators. Regulatory Awareness: Pre-empt changes in the legal and regulatory environment and advise senior management on potential impacts. Oversee the performance and quality assurance of assessment executions for audits and regulatory compliance. Senior Management Support: Ensure appropriate senior management awareness and oversight to follow up on action items and resolve identified issues. Cloud Security: Implement and manage security measures for cloud-based services and infrastructure to protect organizational data and assets. OSS Vulnerability Management: Identify assess and mitigate vulnerabilities in open-source software (OSS) to ensure the security and integrity of IT assets. Ethical AI: Ensure the secure and responsible use of AI technologies within the organization adhering to ethical AI practices. By fulfilling these responsibilities you will help maintain the security and integrity of our organizations IT assets ensuring compliance and mitigating potential security risks. Your skills and experience To excel as a Technical Information Security Officer (TISO) you should possess the following skills and experience: Technical Expertise: Strong technical knowledge of information security principles practices and technologies. AI and Ethical AI: Proficiency in AI technologies and ethical AI practices ensuring the secure and responsible use of AI within the organization. Cloud Security: Expertise in cloud security including the implementation and management of security measures for cloud-based services and infrastructure. OSS Vulnerability Management: Experience in identifying assessing and mitigating vulnerabilities in open-source software (OSS) to ensure the security and integrity of the organizations IT assets. An

Required Education:

bachelors