Cyber Security Specialist

Skills
CICSData PrivacyDue DiligenceISO 27001IT AuditInformation SecuritySecurity Controls
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • You should have a solid background in technical security or experience in IT audit/compliance. The ability to evaluate implemented security measures is more critical than expertise in conducting due diligence on a target.
  • We expect you to have 5+ years of experience within information security or technology with an emphasis on security controls.
  • Good English skills both verbal and written
  • Good at communicating risks to both technical teams, management and senior stakeholders.
  • Good collaboration skills as you will be working with many different stakeholders
  • Broad knowledge of cybersecurity controls
  • Broad knowledge of security standards such as ISO 27001, CIS Critical Controls
  • Knowledge of GDPR regarding relevant technical security measures.

Nice to have

  • Knowledge of NIS, HIPAA, PCI DSS
  • CISSP, ISO 27001 Implementer/auditor certification
  • Multilingual communication skills

Day to day

  • Conduct cybersecurity due diligence and communicate identified risks.
  • Track and follow up on identified remediations.
  • Advise companies on remediating findings from due diligence.
  • Help build and maintain the “team.blue Information Security Standards”.
  • Continuously improve the processes around M&A cyber information security due diligence.
  • Manage third-party providers who conduct cyber security assessments on large acquisitions.
  • Build template policies, procedures, and guides to help less mature companies mature their information security systems.

Hiring process

  • Be prepared to provide proof of eligibility to work in the European country you are applying for