Information Security Specialist

Project description

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients, in their CSO (Chief Security Office) team. Within CSO, Information Security is a critical function responsible for protecting our client's information systems, IT assets, and intellectual property from IT-based crime, hacking, and unauthorized modification, disclosure, or destruction. On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities

• As an Information Security Specialist, you will play a key role in safeguarding the integrity, confidentiality, and availability of our client's data and systems. Your focus will be on ensuring that highly professional and effective procedures, policies, and processes are in place, aligned, and agreed upon with relevant stakeholders across the organization. You will contribute to the development and implementation of our client's Information Security strategy, helping to manage risk and maintain a strong security posture in a dynamic threat landscape. The role's responsibilities are below:
• Threat & Risk Management: Identify and evaluate potential areas of Information Security threat by assessing probability and impact; contribute to the design and implementation of associated mitigations and controls.
• Policy & Governance: Ensure appropriate security procedures, policies, and processes are developed, maintained, and effectively communicated. You will evaluate the adequacy and effectiveness of internal controls relating to information security risks.
• Strategy Implementation: Monitor and contribute to the implementation of the bank-wide Information Security strategy, developing pragmatic approaches to deliver effective controls and achieve security objectives.
• Stakeholder Management: Manage relationships with clients and internal business partners, ensuring management focus on the Information Security agenda and aligning security requirements with business goals.
• Operational Excellence: Depending on your area of focus, you may be involved in Identity & Access Management (authentication, access control), IS Operations (cyber threat analysis, forensics, data leakage prevention), or IS Technology (security architecture, engineering, cryptography).

SKILLS

Must have

• Proven experience in an Information Security role, preferably within the financial services industry or a similarly regulated environment.
• Strong understanding of core information security principles and concepts. Demonstrable knowledge in one or more of the following domains: o Identity & Access Management (IAM): Authentication methods, access control models, privileged access management, recertification processes. o Security Operations: Cyber threat intelligence, incident response, digital forensics, Data Loss Prevention (DLP) technologies. o Security Technology: Security architecture principles, network security, security engineering, cryptographic services and standards.
• Experience in identifying, evaluating, and mitigating security risks and a strong understanding of control frameworks.
• Excellent analytical and problem-solving skills with the ability to develop pragmatic and effective solutions.
• Strong communication and interpersonal skills, with a proven ability to manage relationships with stakeholders at various levels.
• Familiarity with developing and implementing security policies, procedures, and processes.

Nice to have

• Experience in a multinational environment would be a plus;