Your Task

Join our Internal Security Team as a Security Manager PSA who will strengthen preventive security activities, oversee compliance, and drive continuous improvement in our security posture. This role is responsible for ensuring the protection of our people, data, and operations across the organization by setting security standards, managing critical risks, and supporting our business with expert guidance.

Responsibilities

Implement national, corporate or customer security policies and standards into company environment
Develop, implement, communicate and constantly improve security concepts, policies, processes and awareness in the company
Act as main admin with responsibility for proper configuration of respective Security Management systems and applications
Develop yearly audit plan and perform internal security audits resulting in audit evidence and mitigation plans
Contribute and provide support to internal/external/customer audits
Identify security incidents, analyze root causes, coordinate resolution with stakeholders and document evidence
Identify information security risks and create mitigation strategies
Formalize information security risks in the corporate information security risk management tools
Gather IT system-specific information (logs), analyze and measure implementation in case of non-compliance to security rules
Continue operation and improvement of ISMS in respective areas of responsibility (IT Security, Physical Security, Business Continuity, etc.)
Create security related KPIs, provide tracking on regular basis including trends and recommendations for improvement
Initiate and coordinate security projects such as security awareness campaigns, key consolidation, etc.
Specify and design security concepts and architecture
Develop internal security requirements for Microsoft products
Suggest configurations and usage of Microsoft tools
Understand security strategies for products (Security baselines, Disaster recovery management, SIEM, Access management and Privilege access management, GDPR and data protection)
Collaborate with product development teams to integrate security into the product lifecycle
Conduct risk assessments and vulnerability analyses
Understand product infrastructure and help identify security areas
Ensure compliance with industry standards and regulations
Apply understanding of PSA process and tools