Cyber Security Engineer

Business Information Security Office Cybersecurity

Tasks/Requirements

Certified Information Security Manager ("CISM")

Your main tasks will be:

· To work together with cybersecurity, business and technology, and improve the security posture and IT hygiene in the business domains.

· To build and maintain strong relationships with CIOs, business leaders and project managers, and acting as cyber subject matter experts and single point of contact for cybersecurity issues and initiatives in the domain.

· To help the business to have a good understanding of the cybersecurity risks, threats and attacks, and help them to ensure cyber risks

are identified, assessed, mitigated and monitored correctly.

· To ensure products and applications are developed following the security standards and guidelines

· To ensure reducing the attack surface of the business domain through the tracking, prioritization, and remediation of internal and external vulnerabilities

· To report to relevant stakeholder the status of the security posture and progress of the cyber initiatives of the domain.

Skills:

At least 6-8 years experience related to Cyber Risk Management/Information Security (experience in financial services)

· Degree such in computer science, engineering or similar

· High level of English

· Strong working knowledge, understanding and experience in building, driving, and maturing effective Cyber Risk programs.

· Global vision of cybersecurity

· Knowledge in IT operations and processes.

· Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences.

· Strong negotiating, conflict resolution, influencing and stakeholder management skills

· Capable of producing high quality output with a strong focus on attention to detail.

· Strong communication skills, both written and verbal, to communicate effectively across a wide range of stakeholders.

· The following would also be great..

· Knowledge of Cybersecurity systems and infrastructure