Searching for Security (2 years) Manager/PO (2 years) Chief Officer Level (2 years)
Knowing Knowing Security Framework Endpoint Security & Response Security Risk Management Regulatory Compliance Information Security Incident Response Security Disaster Recovery Data Security Cyber Security Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH) Agile (Scrum, Kanban)
Location Location Hybrid barcelona Requires going to the office at least 1 day a week.
Are you passionate about cybersecutiry? Would you like to work directly at (OSI) Information Security Office?
To continue growing at SmartWay we are looking for our next Business Continuity & Disaster Recovery Analyst – based Barcelona.
This person will work closely with the Governance, Risk & Compliance Team and OSI colleagues, as well as other leaders throughout the organization to ensure that the information is properly protected through the development of appropriate protection programs, providing services for an important client in the aeronautical sector.
What we offer? Our working model is hybrid and we balance personal and work life time. We like to work from home but also share time with the team. You will work on a part-time basis with one day a week of work at the client's offices in Viladecans (Barcelona).About our culture one of our main values is transparency therefore you will always know how the company is doing and what our objectives are (we work with OKRs).What do we expect from you? • Work within the Governance team.
• Define, review, update and communicate security policies, standards, guidelines, and best practices. Engage with Group wide standards.
• Contribute to the definition BC & DR strategy, policy, standards, and direction.
• Provide a cybersecurity posturing view of the company.
• Have a risk approach for problem solving. Define and execute Risk Assessment initiatives.
• Ensure compliance of the company's security standards by implementing assurance processes. Assess and challenge the operational effectiveness of security controls.
• Be the Subject Mater Expert for business continuity, disaster recovery, and crisis management, delivering thought leadership to business stakeholders.
• Support and coordinate all aspects of design, implementation, planning, testing and governance of Business Continuity (business process), Disaster Recovery and Emergency Plans (operational), within the framework of the company's Business Continuity unit.
• Ensure that business, IT teams and third parties involved are adequately trained in the requirements, policies, and standards of BC, DR & ERP.
• Develop and manage the BC, DR & ERP test schedule, direct and participate in exercises, follow up, and participate in the analysis postmortem to get feedback and improve activities.
• Build, update and complement business continuity metrics.
• Communicate and support security recommendations to meet business objectives in a proactive and pragmatic manner, ensuring an appropriate level of engagement with stakeholders and contributors to ensure success.
• Measure and assure that controls are in-place and managed properly to meet legal & regulatory compliance for the protection of information.
• Support audit processes. Assist with analysis, documentation, and remediation actions in response to audit findings.
• Oversee Information Security due-diligence activities relative to vendors and third parties.
• Operate as a Consultant to research / recommend changes to enhance, streamline, and automate Information Security procedures.
• Provide, as necessary, guidance to less experienced staff, taking a proactive approach to mentor other members of the OSI team.
• Be asked to take on additional duties as well, when needed.
Required Skills & Experience • Have a bachelor's degree in IT, Aeronautical or related field.
• Have at least 2 years of professional experience working within Information Security and the responsibilities described above.
• Knowledge of Information Security Governance and Compliance frameworks
• Knowledge of Business Continuity frameworks
• Excellent interpersonal skills, including ability to lead, encourage and influence staff across the organization, decision-making and priority identifying.
• Excellent verbal and written communication skills.
• Strong background in all aspects of IT.
• Good time management and related organizational skills.
What do we appreciate: Advanced understanding of Information Security and Cybersecurity; certification (e.g. CEH, OSCP, CISSP, CsX, CRISC, CISA, CISM, etc.) is a plus.Training related to the aeronautical sector.Strong knowledge in air transport niche systems and business processes.Proven history of working independently in a self-motivated manner.¡Take the SmartWay! Hiring ProcessFirst interview with our HR Responsible at SmartWay VP.Second interview with our final client.All about SmartWay VP All about SmartWay VP small company
#J-18808-Ljbffr
