You should have a solid background in technical security or experience in IT audit/compliance. The ability to evaluate implemented security measures is more critical than expertise in conducting due diligence on a target.
We expect you to have 5+ years of experience within information security or technology with an emphasis on security controls.
Good English skills both verbal and written
Good at communicating risks to both technical teams, management and senior stakeholders.
Good collaboration skills as you will be working with many different stakeholders
Broad knowledge of cybersecurity controls
Broad knowledge of security standards such as ISO 27001, CIS Critical Controls
Knowledge of GDPR regarding relevant technical security measures.
Desirables
Knowledge of NIS, HIPAA, PCI DSS
CISSP, ISO 27001 Implementer/auditor certification
Multilingual communication skills
What the job involves
Conduct cybersecurity due diligence and communicate identified risks.
Track and follow up on identified remediations.
Advise companies on remediating findings from due diligence.
Help build and maintain the “team.blue Information Security Standards”.
Continuously improve the processes around M&A cyber information security due diligence.
Manage third-party providers who conduct cyber security assessments on large acquisitions.
Build template policies, procedures, and guides to help less mature companies mature their information security systems.
Application process
Be prepared to provide proof of eligibility to work in the European country you are applying for
team.blue is a leading digital enabler for companies and entrepreneurs. It serves over 3.3 million customers in Europe and has more than 2000 experts to support them. Its goal is to shape technology and to empower businesses with innovative digital services.
Company benefits
Opportunity to use broad knowledge of information security and technology