Our role:
We are looking for an experienced Information Security Officer, for our office in Porto, to join our Information and Cyber Security team.
This is a position of great responsibility that will report directly to the CISO of Körber Digital. As an Information Security Officer, you will play a vital role in delivering the Information and Cyber Security programme of activities that will touch upon every part of the organisation.
You will implement and maintain the enterprise information security compliance and IT risk management program with support from the CISO, alongside the Security and IT teams and you will also be interacting with the business areas at large, co-ordinating other information security specific functions such as risk assessments, compliance, audits, and vendor management.
To be successful as an Information Security Officer, you should have expert analytical skills, in-depth knowledge of recognised market standards and best practices to prevent a wide range of security threats.
Top candidates will also be excellent communicators, able to train and educate our staff in various information security topics.
You will:
Implement and maintain the enterprise Information Security Compliance and IT Risk Management program;
Implement and maintain the enterprise Business Continuity Plan;
Align existing operational processes with Group Policies, Business requirements and recognised Market Standards;
Monitor and audit operational processes with respect to deviations from target, on a regular basis;
Implement and maintain the enterprise Security Awareness and Training program;
Train all staff on required practices and behaviour, on a regular basis;
Implement and maintain the enterprise Physical and Environment Security program;
Assist and co-ordinate any security related audits (Ventures, Customer, etc);
Provide detailed metrics and reporting;
Contribute towards and promoting the Information and Cyber Security strategy.
Your profile:
Licentiate Degree or equivalent professional experience;
Proven experience in delivering complex information and security programmes;
Proven experience in implementing and maintaining an ISO 27001 certification;
Demonstrable awareness or qualified in ITIL and/or Project Management;
Demonstrable experience or a certification in ISO 27001;
Demonstrable experience or a certification in GDPR;
Fluency in the English language (written and spoken);
Strong communication skills;
Good organizational, analytical, and problem-solving skills;
Strong influencing skills;
Good teamwork skills;
Critical thinking, innovative and self-motivated;
Ability to manage multiple demanding projects concurrently.
