As an IT Risk and Security Specialist you will:
- Challenge and motivate teams on risk and security matters.
- Conduct quality checks on IT Risk Management Process (ITRMP) evidence delivered by teams and perform First Line Monitoring (FLM) checks (stage 8).
- Review approve or decline the Operational Security Baseline delivered by teams.
- Lead risk sessions and meetings within the tribe and participate in Business Impact Analysis (BIA) and Detailed Risk Assessment (DRA).
- Advise and guide product teams on adherence to Information Risk Minimum Standards.
- Maintain and update Risk Journeys including documentation and engineer instructions.
- Provide support for tooling usage such as Amyna SDT and ITRMP.
- Assist and advise on issues registered in iRisk/CAS from audits risk events risk acceptances and managementidentified actions.
- Monitor and follow up on registered risk items.
- Act as the main contact for the 2nd Line of Defense (ORM/IRM and BISO SPOC CB&A).
- Organize and lead biweekly Risk Evaluation Meetings (REM) for the IT area.
- Support the tribe in creating and maintaining a Business Continuity Plan (BCP).
What You Bring to the Table:
- 5 years of proven expertise in IT Risk Management including Change Management Identity and Access Management Operational Resilience Platform Security and Cybersecurity.
- CISSP CISM CISA or other IT riskrelated certifications are preferred.
- Conceptual understanding of technologies such as Linux Windows containers and Azure DevOps.
- Strong analytical skills attention to detail ability to work autonomously and excellent social and communication skills to collaborate effectively.
You should possess the ability to:
- Analyze and assess IT risks with precision and offer actionable recommendations.
- Motivate teams and foster a culture of proactive risk management.
- Communicate complex security and risk topics in a clear and accessible manner.
- Adapt to evolving challenges and provide innovative solutions.
What We Bring to the Table:
- A dynamic and collaborative work environment with opportunities to lead and influence risk management practices.
- Access to cuttingedge technologies and tools for risk assessment and management.
- A culture of continuous learning innovation and professional growth.
- The opportunity to contribute to the security and resilience of key IT systems.
- Fluent in English with the ability to articulate complex risk clearly and security concepts.
As an IT Risk and Security Specialist, you will: Challenge and motivate teams on risk and security matters. Conduct quality checks on IT Risk Management Process (ITRMP) evidence delivered by teams and perform First Line Monitoring (FLM) checks (stage 8). Review, approve, or decline the Operational Security Baseline delivered by teams. Lead risk sessions and meetings within the tribe and participate in Business Impact Analysis (BIA) and Detailed Risk Assessment (DRA). Advise and guide product teams on adherence to Information Risk Minimum Standards. Maintain and update Risk Journeys, including documentation and engineer instructions. Provide support for tooling usage such as Amyna, SDT, and ITRMP. Assist and advise on issues registered in iRisk/CAS from audits, risk events, risk acceptances, and management-identified actions. Monitor and follow up on registered risk items. Act as the main contact for the 2nd Line of Defense (ORM/IRM and BISO SPOC CB&A). Organize and lead bi-weekly Risk Evaluation Meetings (REM) for the IT area. Support the tribe in creating and maintaining a Business Continuity Plan (BCP). What You Bring to the Table: 5+ years of proven expertise in IT Risk Management, including Change Management, Identity and Access Management, Operational Resilience, Platform Security, and Cybersecurity. CISSP, CISM, CISA, or other IT risk-related certifications are preferred. Conceptual understanding of technologies such as Linux, Windows, containers, and Azure DevOps. Strong analytical skills, attention to detail, ability to work autonomously, and excellent social and communication skills to collaborate effectively. You should possess the ability to: Analyze and assess IT risks with precision and offer actionable recommendations. Motivate teams and foster a culture of proactive risk management. Communicate complex security and risk topics in a clear and accessible manner. Adapt to evolving challenges and provide innovative solutions. What We Bring to the Table: A dynamic and collaborative work environment with opportunities to lead and influence risk management practices. Access to cutting-edge technologies and tools for risk assessment and management. A culture of continuous learning, innovation, and professional growth. The opportunity to contribute to the security and resilience of key IT systems. Fluent in English, with the ability to articulate complex risk clearly and security concepts.