IT Controls and Risk Analyst
IT Controls and Risk Analyst
Responsibilities:
- Serve as the central contact for information security-related matters in service provisioning, interfacing with business units, partners, customers, and safeguarding functions, while providing consulting and liaison with stakeholders.
- Promote knowledge and awareness of security requirements and processes, ensuring effective implementation of security principles throughout the service lifecycle, including external parties.
- Coordinate, track, and monitor information security risks with risk owners, conducting regular security review meetings to assess and address risks.
- Systematically assess the effectiveness of security controls in services provided, ensuring compliance with Group-wide standards, regulatory requirements, and industry standards.
- Develop security policies, guidelines, and procedures, contributing to the definition of contractual security provisions for third-party management.
- Manage security risk assessments, addressing deviations from security policies, and developing strategies to mitigate identified information security risks.
- Identify protection goals, objectives, and metrics to oversee the implementation and compliance of security standards in all services and projects.
What You Bring
- University degree in computer science, natural sciences, or equivalent professional experience, with over 5 years of experience in IT and information security-related fields.
- Sound knowledge of IT security technology, architecture, and processes, including information security management systems and industry standards (ISO2700x, COBIT5/2019,ISO31000,ISO42001,NIS2,DORA,NIST).
- Proven experience in developing information security policies and procedures, with a strong track record in supplier management, IT outsourcing, and defining/monitoring contractual security provisions.
- Technical skills in Power BI, Power Automate and AI.
- Project management and leadership experience in complex enterprise environments, preferably within agile teams, demonstrating the ability to cope with high workloads and exercise independence, judgement, and initiative.
- Proficiency in English with excellent international communication skills, capable of preparing professional documentation for various audiences and senior management.