Our client is a well-established financial institution with a long-standing history. Due to the dynamic expansion of its IT operations, the introduction of new systems, and the modernisation of existing ones, the company is seeking an experienced professional with solid expertise to strengthen its IT security operations, ensure compliance, and manage security risks in the following key position:
IT Security and Risk Management Specialist
If you:
- hold a university degree in IT or a related discipline,
- have 3–5 years of experience in IT security, IT risk management or IT audit,
- have regulatory and documentation experience and are familiar with cybersecurity standards and frameworks (e.g. ISO 27001, NIS2, DORA),
- possess strong knowledge of networks and systems as well as experience in log analysis,
- have ITIL knowledge and process management experience,
- demonstrate excellent analytical and problem-solving skills and are able to assess and manage complex security situations and develop action plans,
- have excellent communication skills and can perform effectively under pressure (e.g. during audit situations),
then we would be delighted to receive your application!
An advantage would be if you:
- Hold relevant IT security certifications (e.g. CISO, CISSP, CISM, CISA)
- Have experience using vulnerability management or threat monitoring systems
Main responsibilities:
- Develop and maintain security documentation, policies and processes, ensuring DORA and NIS2 compliance
- Conduct IT security risk analyses, regular risk assessments, and prepare mitigation plans
- Prepare for and support internal and external audits; manage and follow up on identified risks
- Design and develop the corporate security architecture; propose new solutions, tools and processes
- Operate and oversee security systems (firewalls, SIEM, IPS, DLP); analyse reports
- Carry out proactive prevention activities: vulnerability assessments, threat monitoring, incident management and preventative coordination
- Coordinate the SOC team’s work and supervise DLP processes
- Promote security awareness through training sessions and campaigns
- Establish, monitor and review ITIL processes
- Prepare and maintain system security design documentation in accordance with relevant policies
What the company offers:
- Hybrid working model (three days working from home per week)
- Excellent location with easily accessible offices
- Work–life balance in a family-friendly environment
- Competitive remuneration package
- Opportunities for professional growth and development
- Supportive management and a culture of knowledge sharing