Information Security Specialist
Description
Why Ness
We know that people are our greatest asset. Our staff’s professionalism, innovation, teamwork, and dedication to excellence have helped us become one of the world’s leading technology companies. It is these qualities that are vital to our continued success. As a Ness employee, you will be working on products and platforms for some of the most innovative software companies in the world.
You’ll gain knowledge working alongside other highly skilled professionals that will help accelerate your career progression.
You’ll also benefit from an array of advantages like access to trainings and certifications, bonuses, and aids, socializing activities and attractive compensation.
Requirements and responsibilities
What you'll do:
- Identify and mitigate security risks through regular assessments and implementing control measures.
- Create, maintain, and update security policies and procedures in line with best practices.
- Ensure adherence to relevant regulations (e.g., ISO 27001, NIS 2, GDPR) and support audit processes.
- Manage tools and processes to monitor and report on security threats and vulnerabilities.
- Develop and deliver security awareness programs to educate customers and colleagues.
- Work closely with IT and other departments to integrate security into all aspects of the organization.
- Implement encryption and data protection measures to safeguard sensitive information.
- Perform incident detection, response, and recovery efforts to minimize impact on business operations.
- Providing consultation to customers and internal team in the design and implementation of IT security
What you'll bring:
- Hands on experience in conducting risk assessments and developing mitigation strategies.
- Customer Focus - Making customers and their needs a primary focus of one's actions
- Communication - Clearly conveying information and ideas through a variety of media to individuals or groups in a manner that engages the audience and helps them understand and retain the message
- Technical / Professional Knowledge - Having achieved a satisfactory level of technical and professional skill or knowledge in position-related areas; keeping up with current developments and trends in areas of expertise.
- Flexibility: Ready to work beyond designated office hours in case of business needs
- Attitude: Be a team player and be able to work on assigned projects in an individual mode
Key skillsets:
- Knowledge of ISO 27001, NIS 2, DORA, GDPR
- Knowledge of security policies
- In-depth knowledge of regulatory requirements and audit preparation.
- Proficient with SIEM, IDS/IPS, and other monitoring tools
- Knowledge of secure network architecture and cloud security.
- Strong understanding of encryption, and data protection measures.
Nice to have:
Desired Certifications:
Security certification from ISACA, ISC2 or similar (Advantage)
Not checking every single requirement?
If this role sounds good to you, even if you don't meet every single bullet point in the job description, we encourage you to apply anyway. For most of the candidates that applied, we found a role that was a very good fit with their skills.
Let's meet and you may just be the right candidate for one of our roles.
At Ness Digital Engineering we are willing to build a work culture that is based on diversification, inclusion, and authenticity.