Security Manager

Purpose

Implementation of the national, corporate or customer security policies and standards into company environment. Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company. Executes ISMS P-D-C-A cycle in his/her area of responsibilty.

Key accoutabilities

• Implementation of the national, corporate or customer security policies and standards into company environment,
• Developing, implementation, communication and constant improving of security concepts, policies, processes and awareness in the company,
• Acts as main admin with responsibility for proper configuration of respective Security Management systems and applications in his/her area of responsibility
• Develop yearly audit plan and perform internal security audits resulting to audit evidence and mitigation plan,
• Contribution and support to internal/external/customer audits ,
• Identification of Security incidents, analysis of the root cause, resolution with stakeholders and evidence,
• Identification of information security risks resulting to mitigation strategy creation. Formalizing of the information security risks in the corporate information security risk management tool ( e.g. ISRM.xls or ISH),
• Gathering IT system-specific information (logs), analysis and measures implementation in case of non-compliance to security rules,
• Continuous operation and improvement of ISMS in his/her respective area of responsibility e.g. IT Security, Physical Security, Business Continuity etc.
• Creation of security related KPIs, provide tracking of KPIs on regular basis including trends, recommendations for improvement
• Initiation and coordination of security projects e.g. security awareness campaign, key consolidation, etc.

Benefits

• Possibility of teleworking or home office
• Cafeteria Bonus - an annual package of money based on job complexity
• Variable payment - yearly bonus defined in employment contract, based on reaching company objectives
• Financial bonus for recommendation of a candidate
• Financial bonus for relocation
• Employer pension contribution (III. pillar)
• Extra vacations based on position complexity
• Special program for key employees
• Work life coaching - psychological, work, legal and financial consulting
• Vacation contribution - for employees with employment contract who are continuously 24 months at least in the company
• Hard-skills and soft-skills trainings
• Opportunity to upskilling and reskilling by internal and external trainings and certifications
• Discounts at various providers
• Health week activities twice a year
• Usage of relaxation area Alejová
• Metro card
• Diners credit card

For more information about benefits -http://https://www.deutschetelekomitsolutions.sk/en/career/advantages-of-working-in-T-systems Salary 

Salary

Final salary is negotiable. 
We are offering base salary depending on seniority level and previous experience of candidate. In addition to base salary we provide variable part and other financial benefits. Base salary will not be lower than 1150/brutto.

Requirements

Education

• Master´s degree - Information Technplogies

Experience

• Security management - minimum 3 years

Certification

• Equivalent certification e.g. CISSP, CISA, CISM, Security+

IT technical skills

• Practices and methods of IT strategy - advanced
• Enterprise architecture and security architecture
• ISO 27001/27002, ITIL and COBIT frameworks
• Windows, UNIX and Linux operating systems
• C, C++, C#, Java and/or PHP programming languages
• Firewall and intrusion detection/ prevention protocols, Secure coding practices, ethical hacking and threat modeling, TCP/IP, computer networking, routing and switching, Network security architecture development and definition
• Third party auditing and cloud risk assesment methodologies

Soft skills

• Leadership - advanced
• Communication - advanced 

Languages

• English - upper intermediate (B2)
• German - advantage