CISO - Chief Information Security Officer (M/F) - JO-1904-139115

Detalhes da oferta

Kelly IT Resources is recruiting a CISO - Chief Information Security Officer for a multinational client in the bank industry.

Key Requirements:

• Master's or MBA in Computer Engineering or Security (not mandatory)
• Good knowledge of English, especially in writing for the preparation of manuals for the group.
• Minimum of 8 years of experience in Security Operations

Main areas os responsability

Security operations:

• Real-time analysis of immediate threats, and triage when something goes wrong.
• Risk analysis based on the CIAT.

Cyberrisk and cyber intelligence:

• Keeping abreast of developing security threats, and helping the board understand potential security problems that might arise from new developments as well as new
• "package/software" instalations.

Data loss and fraud prevention:

• Develop DLP framework and helping on fraud prevention by analysis of SIEM logs.
• Machine Learning or some knowledge of it (AI).

Security architecture:

• Work in conjuction with the architechture team to provide secure diagrams of implementation.
• Maintain a security anaysis per asset (AIA).

Identity and access management:

• Ensuring that only authorized people have access to restricted data and systems, maintaining federation trusts with partners.

Program management:

• Keeping ahead of security needs by implementing programs or projects that mitigate risks
• Monitor the regular patch cycles
• Perform regular vulnerability scans

Investigations and forensics:

• Determining what went wrong in a breach, dealing with those responsible if they're internal, and planning to avoid repeats of the same crisis.

Governance:

• Develop & help deploy "framework/procedures" to enforce Governance.
• Create Security Policies, Procedures and Standards
• Ensure that all security requirements have been identified and documented
• Enforce GDPR

Technical Knowledge:

• Know the relationship between CVE and CVSS
• Use of Nmap, Kali Linux, OWASP, Nessus
• IPS, IDS, WAF, FW, VPN, DNS, routing, authentication, TLS, PKI, DDoS, SNMP

Certifications:

• Good knowledge of NIST and ISSO / IEC 27001
• One of the following (or equivalent) certifications:
  • CISSP
  • SSCP
  • CISM
  • CEH
  • CISA