Përshkrimi

Get this opportunity!

Be that ONE!

Information Security Expert

Purpose of the position: Contributing to the maintenance and improvement of the ISMS and BCM programs based on ISO 27001, ISO 22301 and Albanian Legislation/s. Follow and implement ISMS and BCM processes and procedures to be used in the local ISMS and BCM programs including the development of ISMS, BC, IT DR, Network DR and Contingency planning, identification of local contingency facilities and requirements. This position works in active cooperation with all team members.

Main Tasks:

• Propose solutions to IT security vulnerabilities, and coordinate with IT/Network/ other business units for activities that needs to be done to correct /prevent IS vulnerabilities until closure.
• Assess and manage mitigation finalization of any security related findings of any type of audit report: ISO 27001 Audit Report, Group Report, Internal Audit Report, Internal Control Audit, etc.
• Prepare reports regarding potential IT security vulnerabilities by assessing and analysing periodically information security related system data (ex: from Log Event Management Tools, SIEM, Exchange & AD Auditing Tools, firewall, antivirus system, Defender, NESSUS, etc.
• Coordinate with development and IT teams to ensure security vulnerabilities are addressed promptly.
• Collaborate continuously with other Company Teams Audit / IT teams/etc in case of an information security related event or security breach by performing the incident response process, analysis, identification, containment, eradication, recovery, and lessons learned.
• Prepare and provide reports on security incidents, security performance/scanning results.
• Produce detailed reports for senior management on the state of the organization’s security posture.
• Oversee the configuration, implementation, and maintenance of security infrastructure, such as firewalls, DMZs, VPNs, etc. Ensure encryption protocols, access control measures, and security updates are properly in place.
• Support other IT and Network Group Managers for BCP (Business Continuity Planning and Procedures) to be defined, tested and validated.
• Create, implement, and update information security policies, standards, and procedures.
• Ensure compliance with security policies by employees and third parties.
• Conduct regular security risk assessments to identify potential vulnerabilities, threats, and risks to the organization’s information systems.
• Participate in security audits and ensure readiness for internal or external assessments.
• Monitor and analyse data movement via DLP Solution within and outside the organization to ensure security compliance.
• Manage and ensue that employees Information Security Awareness Trainings are delivered via Proofpoint Security Awareness Platform. Deliver on-site security awareness training sessions.
• Perform in time all the mandatory information security awareness trainings assigned from the Information Security Team.
• Comply with Information Security Policies, and all company procedures and regulations.
• Other duties as needed based on job responsibilities.

Education: University Degree in Electronics/Computer Sciences/Informatics.

Experience and Qualifications: At least 5 years working experience in IT or GSM environment, preferably networking/systems implementation or maintenance profile.

Active participation on System/Computer Networks implémentations, configurations.

Skills:

• Good communication and presentation skills.
• English Language well spoken and written.
• Confidentiality, loyalty and flexibility, credentials such as ISO27001 Lead/Internal Auditor, CompTIA Security+, CC, CISSP, CISM, BCCP, BCCS are considered an advantage.

Interested candidates should apply through the link: Job Detail | ONE

Deadline for the application is April 3^rd 2025.

We will be glad to interview all candidates selected from the CV screening.

HR GROUP