Business Information Security Officer Job at EDF UK (London)

VP, Information Security Officer (ISO), Markets, Taiwan

The Chief Information Security Office (CISO) is home to deeply talented colleagu...

Location

Taiwan , Taipei

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of relevant experience in Information & Cybersecurity space or related domains such as risk management, auditing, consulting & advisory services
One or more of IS/Cybersecurity industry standard certifications (e.g. CISA, CISSP, CISM, SANS GIAC, CEH, CRISC, CCSP,SSCP, CompTIA Security+ etc.) are mandatory
Strong understanding of Information security domains with hands on experience of performing application security risk assessments covering controls such as Identity & Access Management, API Security, Cloud/SaaS Security, Cryptography, Sensitive Data protection, Audit Logging/Monitoring, Secure SDLC controls
Sound knowledge of Network Security controls (including Firewalls, IDS/IPS) and Application Vulnerability Assessments/Source code & component vulnerability scanning related controls
Good understanding of Markets Business and Applications such as such as trading platforms, order management systems, risk management systems, pricing engines etc. is an advantage
Hold relevant professional certificates recognized by local authorities
Sound knowledge of IS/Cybersecurity related local regulatory, and compliance requirements in the financial services industry and Securities & Futures Markets
Understanding of policy compliance and how it relates to risk
Extensive knowledge of information security risk assessment methodologies/industry standards
Demonstrated ability to take ownership and follow up on issues

Job Responsibility

Act as a Trusted Security Advisor to business and technology teams, guiding them on IS/Cyber risks
Appropriately assess risks when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets
Drive compliance with applicable Information & Cybersecurity laws, rules and regulations, adhering to relevant Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
Serve as the local point of contact of all information security matters, including management, governance, compliance, and third-party risk management
Manage local audit and regulatory engagements impacting CISO
Drive country-specific control implementations or special programs, where deemed necessary based on risk assessments or local regulatory requirements
Work with business & technology management to drive the information security program and govern risk management activities including CSRA (Cybersecurity Risk Appetite) reporting
Work with the internal Applications Development function to facilitate improvements in both architectural and application security posture
Provide strategic risk guidance for business and technology projects, including the evaluation and recommendation of security controls and corrective actions to mitigate/remediate risks
Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation

What we offer

Extensive on-the-job training and exposure to senior leaders
Access to telehealth options, health advocates, confidential counseling
Expanded Paid Parental Leave Policy
Access to an array of learning and development resources
Generous paid time off packages
Resources and tools to volunteer in the communities

Fulltime

Information Security Officer

TUI Group is the world’s number one integrated tourism business. The Security Do...

Location

Portugal , Lisbon; Oporto

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

An experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Protect the TUI brand and its customers
Detect and respond to incidents, strengthen our defences, reduce the attack surface and secure our behaviours
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Ensure effective security operations (e.g. vulnerability scanning, patching)

What we offer

Attractive remuneration
Bonus opportunity
Exclusive travel perks & discounts
Extensive health & wellbeing support
Flexible working
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub
Participate in tech communities and collaborate on global projects and teams
Get involved with local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

Information Security Officer

The Information Security Officer is a senior leadership role responsible for ove...

Location

Portugal , Lisbon; Oporto; Madrid; Barcelona

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

Experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Protect the TUI brand and its customers, detect and respond to incidents, strengthen defences, reduce the attack surface and secure behaviours
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Ensure effective security operations (e.g. vulnerability scanning, patching)
Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit

What we offer

Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support
Flexible working: hybrid or remote working models
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub to level-up and reach your ambitions
Participate in our tech communities and collaborate on global projects and teams
Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

Information Security Officer

Information Security Officer is a senior leadership role (a member of the GRC Le...

Location

Portugal , Lisbon; Oporto; Madrid; Barcelona; Flexible

Salary:

Not provided

TUI

Expiration Date

Until further notice

Requirements

Experienced authentic leader with a good understanding of technology and managing Information Security risks in the enterprise
Passionate about Information Security, delivering business value and driving continuous improvement
Strong people leadership skills and experience in building a positive enabling security culture based on trust, quality and pragmatic risk management
Great communicator and influencer comfortable working across hierarchical, organisational, cultural and market boundaries
Experience of managing teams, mentoring and developing security talent from different cultural backgrounds
Professionally qualified holding a recognised security accreditation (CISSP/CISM/CISA etc.,) or equivalent experience with demonstrable Continuous Professional Development
Maintain a good understanding of latest security threats and the mitigating strategies
Ability to provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards
Experience of the implementation, operation and maintenance of an Information Security Management framework such as ISO27001 or NIST CSF
Good understanding of integrating security into software or product development lifecycle and cloud security

Job Responsibility

Promote and inspire a security first culture at TUI
Direct the development, implementation, delivery and support of an enterprise Information Security strategy aligned to the strategic requirements of the business
Lead the provision of Information Security resources expertise, guidance and systems necessary to execute strategic and operational plans across all of the organisation’s information systems
Ensure that each Domain is motivated and empowered to deliver the prioritised roadmap
Drive adoption of and adherence to security policies, standards and controls through the provision of expert advice and guidance
Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place
Ensure security incidents are managed effectively through engagement with the security operations team, and that lessons learned and audit findings are remediated
Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit
Manage risk in a pragmatic and cost-effective manner to ensure stakeholder confidence
Report on the overall effectiveness of the security programme on each Domain against defined key performance indicators and drive continuous improvement

What we offer

Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support
Flexible working: hybrid or remote working models
Opportunities to upskill, reskill and grow your career
Access the TUI Tech Learning Hub to level-up and reach your ambitions
Participate in our tech communities and collaborate on global projects and teams
Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community

Fulltime

Senior Information Security Officer

Senior Information Security Officer (ISO Sr. Analyst - AVP) is an intermediate l...

Location

Turkey , Istanbul

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of relevant experience
Strong knowledge of local regulations (BRSA) and cybersecurity principles
Proficient in interpreting and applying policies, standards and procedures
Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Proven analytical skills
Preferably holding IT/security certifications such as CISA, CISM, CISSP, CRISC, CEH or similar
Follows cybersecurity trends
Bachelor’s degree/University degree or equivalent experience

Job Responsibility

Address security issues identified in the various information security programs
Review and address issues identified within various Information Security (IS) programs and ensure all IS issues related to Internal Audit, and External Auditors are closed by their original target date
Improve the efficacy of governance processes by identifying risks, monitoring controls, and remediating issues
Establish cross-sector working relationships and complete weekly awareness discussions with local team to efficiently tackle security issues
Ensure risk exceptions are raised, registered and closed on a timely basis and communicate updates and changes to the global standards
Complete Risk Assessment process, including completing accurate inventory reporting, data classification, threat analysis, and action plans
Test and validate that the business complies with applicable IS requirements
develop and implement IS policies and procedures
Determine and validate appropriate level of controls are being implemented to safeguard sensitive data
Develop Corrective Action Plans for all Information Security-related gaps and approve all closures through reviewing evidence to ensure each closure meets Citi Requirements

Fulltime

Information Security Officer

Information Security Officer (ISO) is a subject matter expert for business, func...

Location

Mexico , Ciudad De Mexico

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

6-10 years of relevant experience
Sound understanding of Information security domains such as Identity Access Management, Cryptography, Data Protection, Vulnerability Assessment, Single Sign-On, Multi-Factor Authentication etc
Knowledge of Cloud and Containers security will be of added advantage
Additional technical certifications are preferred
Demonstrated ability to research and apply current information regarding the IS field
Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Proven analytical skills

Job Responsibility

Work directly with business, functions and technology units and relevant stakeholders to facilitate/ perform Information Security risk assessment and risk management processes to protect information assets
Work with business and technology management to drive the information security program and information risk management activities
Work with the internal Application Development teams to develop strategies and plans for improving architecture and application security
Provide strategic risk guidance for business and technology projects, including the evaluation and recommendation of IS controls
Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data, and the company's reputation
Participate in the evaluation and selection of applications and systems with focus on Information Security areas
Facilitate compliance with all Information Security policies, standards and regulations / directives as mandated by Global CISO Organization
Participate/provide, as required, IS awareness training programs for employees, contractors and approved system users

Fulltime

Senior Information Security & OT Officer

Senior Information Security & OT Officer role at METLEN Energy & Metals, focusin...

Location

Greece , Athens

Salary:

Not provided

Metlen Group

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information science, Information systems or a related scientific field
Master’s degree will be considered an asset
+5 years of experience in Information Security or Cybersecurity roles
Strong technical background in cybersecurity and OT security
Proven experience in managing information security in OT environments is a strong plus
Solid understanding of ISO 27001, ISA/IEC 62443, and NIS2 directives
Strong knowledge of risk management methodologies and compliance frameworks
Excellent collaboration and communication skills for multi-site and cross-border coordination

Job Responsibility

Respond to audit requirements for all international sites including factories, energy plants, and solar fields
Participate in cyber incident response processes related to international and local industrial installations
Guide technical leaders and support information security compliance in Greek and international operations
Propose cybersecurity architectures and solutions to safeguard operational technology (OT) infrastructure
Participate in management committees to inform senior leadership on cyber risks and compliance issues
Work closely with international IT business partners on cybersecurity topics across the global footprint

What we offer

Competitive remuneration package
Ticket Restaurant Card
Group Health Insurance Plan
Preferential household electricity plan
Pension Plan

Fulltime