Information Risk Officer

Why do we want you?

We want you because you are always spot on when it comes to peoples’ needs and can always find new creative ways of approaching a specific target. We want you because of your strong analytical abilities and understanding of the current market trends. We also want you for who you are because for us, personality is just as important as your CV. We strongly believe that your way of thinking and unique perspective on life are tools you will use on your way to success.

 

What we require from you?

Experience:

At least 2 years in IT with at least 1 in information security;

Experience in risk management would be a plus.

Education:

BA/BS degree (IT, Automatics & Computer Science, Cybernetics, Electronics preferred), or equivalent experience, security qualifications and accreditation

Certifications:

Any of the following would be an advantage: CompTIA Security+, CCNA, CCNA Security, SSCP, CISSP, CISM, CRISC, CISA, CEH;

Hard skills:

Knowledge of information security principles and concepts, risk management concepts, IT security standards and best practices;

Good understanding of technical concepts related to networking, infrastructure and application security, endpoint technologies, physical and virtual data center hosting;

Experience in the design, development, implementation and operational support of mission critical solutions in large scale environments and organizations and security controls for these solutions;

Experience in monitoring activities of IT controls at both technical and operational level.

Soft skills:

Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, business stakeholders and IT team members;

Strong negotiation skills – able to firmly express his/her own view point and to persuade others;

High degree of initiative, dependability and ability to work with little supervision.


Language:

English: advanced

 

What will you actually be doing?

Perform Business Impact Assessments and Risk Assessments on information assets, projects or programs with IT component;

Oversee specific fist line of defense IT operations reacting to IT risks, events and incidents;

Test the design and effectiveness of IT controls and report on residual risk levels;

Recommend controls for the identified risks, agree action plans and closely monitor them until completion;

Active involvement in NN projects providing input/advice on information risk and security aspects at different stages of the project life-cycle: business requests, contracting phase, assessment of potential external partners, solution and controls design, assessment of final deliverables;

Develop and/or review documentation such as: policies, procedures, standards, external connections, operational security guidelines, test results, etc.;

Responsible with developing and implementing  Information Security culture, education and awareness programs;

Support IT department and Information Risk Coordinator in keeping an accurate and up to date Disaster Recovery  Plan;

Maintain, review and test business continuity plans to ensure that the company is prepared to optimally react in case of crisis.

 

Is this the job for me?

You are perfect for the role, if you:

Are a team player

Are client oriented

Have an analytical way of thinking

Have good communication skills (both: oral and written)

Pay attention to details

Can handle stress

To apply and become part of our team send your CV at roxana.cirligel@nn.ro