Information Security Engineer

Full Job Description

ROLE SUMMARY

The security analyst collaborates with all departments to identify and fix flaws in our systems and applications security processes and lead the ISO 27001 implementation and maintenance. He or she will also be responsible for ensuring and maintaining our compliance with data privacy policies like NDPR and GDPR.

• Design, analyze and implement efficient IT security systems
  
• Implement and maintain our ISO27001 certification processes
  
• Conduct security vulnerability assessments and penetration testing across all our software products and infrastructure
  
• Perform frequent security audits
  
• Develop and maintain the company’s disaster recovery plans
  
• Create policies guiding data protection/security, access and backups
  
• Install and maintain security software
  
• Ensure proper adoption of the incident management framework for logging security incidents
  
• Verify the security of third-party vendors and collaborate to ensure adherence with our security policies
  
• Train users and promote security awareness across the entire organization
  
• Develop and enforce an information security policy program for the organization
  

• A BEng/BSC degree in Computer Science or a related relevant field
  
• 3+ years of experience in information security
  
• S ecurity certifications such as CISSP, GISP, and CISM, ISO27001 CLIP, etc
  
• Experienced in vulnerability assessment and penetration testing techniques
  
• Ability to identify and mitigate network vulnerabilities
  
• Excellent written and oral communication skills
  
• Familiarity with software development technologies (SOA, microservices, Java, etc)
  
• Hands on experience with Linux and Windows servers administration