IT Security Sr Specialist Purpose of position The role, reporting directly to the IT Security Manager, will be responsible for the secure operation of IT services, and the enhancement of IT security technologies and procedures in the areas of endpoint security, application security, network and infrastructure security, and cloud security.The role will also be the internal leader for cyber incident handling operations and the SME for latest cyber security trends and technologies provided by market-leading vendors.
Main Responsibilities • Collaborate on the design, implementation, management, and continuous improvement of the group's IT security technologies.• Collaborate with IT Applications and Infrastructure teams, and with local IT teams to ensure the implementation of IT Security technologies and procedures• Managing the external SOC service as well as any outsourced IT security services• Supporting the cyber incident handling process, including lead the Group Cyber Incident Response Team• Regular scanning of vulnerabilities, identification of remediation or mitigation actions as well as monitoring of implementation• Define IT security operations KPIs and provide regular performance reports• Write and maintain IT security documentation Requirement: • University degree in cyber security, computer science, computer engineering, or a related field• Minimum of 5 years of experience in IT security, preferably in multinational enterprise companies• Expertise in cyber security incident response and SOC processes• Strong expertise in design, develop, and maintenance of IT security technologies including EDR, SIEM, SWG, CASB, ZTNA, DNS Filtering, PAM, MFA authenticators, VA&Patching, Firewall, IDS/IPS• Advanced knowledge of infrastructure services and environments including Microsoft Active Directory, Microsoft Entra ID, Microsoft 365, VMware vSphere, main network appliances and protocols, IaaS/PaaS (AWS, Azure, Oracle Cloud)• Experience in performing vendors and suppliers management• Experience in developing and maintaining policies, procedures, security reports• Knowledge of common information security standards and good practices ( ISO 27K, NIST)• Fluent English, writing and speaking• Excellent communication, interpersonal, and presentation skills• Strong problem solving and analytical thinking• Teamworking Nice to have: • Knowledge of common IT Service Management and IT Governance standards and good practices (ITIL, ISO 20K, COBIT)• Experience in the pharma industry or in any other GxP regulated industries• Knowledge of OT security standards (IEC 62443) and experience in protecting OT systems
