Security Specialist - Governance and Assurance 100% (m/f/d)

REFERENCE NUMBER:

510570/1

MY DUTIES:

- Provide expert advice and operational experience on information security risk and control matters throughout the organisation
- Support the Governance & Access team with change approval, design reviews and risk assessments, contribute to the operations of information security processes, technology, and capabilities 
- Ensure security by design through providing security recommendations in alignment with standards 
- Contribute to cyber protection and cyber resiliency requirements in the areas of asset and vulnerability management, risk management, awareness and training, baseline security configuration, 2nd line monitoring, and data protection
- Support and liaise with the IT, cyber security and security engineering teams in realisation of detective and response capabilities
- Assist with the coordination of the operations of vulnerability testing, including follow-up
- Assist with application security program and support software developers in embedding security into the development lifecycle
- Support the maturing of the penetration testing strategy and support in scoping and engagement with third parties
- Review and advise on the security measures to protect the confidentiality, integrity and availability of information assets and critical services
- Contribute to reviews of the assessment methodology
- Contribute to the implementation of industry-recognised key critical controls and contribute to Corporate Security compliance mandate 
- Support the team on technical security projects to develop and enhance security policies and procedures
-Participate in the gathering and analysis of information from security-related sources
- Support the team with the change management review and approval process

MY QUALIFICATIONS:

- Strong understanding of IT infrastructure and application architecture, including cloud technologies (Microsoft Azure)
- Familiar with industry-recognised key critical controls (e.g. CIS, OWASP, SANS, etc…)
- Demonstrated security skills in the area of application security, penetration testing and cloud technology
- Strong analytical and documentation skills 
- Good understanding of mobile related technologies, virtualisation, containers, as well as cloud security 
- Experience with documenting and communicating results that may be consumed by both developers and management-level audiences
- Strong analytical capabilities and data-analysis skills
- Team player but technically autonomous
- Certification in security-related disciplines and technologies would be an advantage (accreditation such as CISSP or CISA)
- Experience with some of the following: Next Generation Firewalls, Automation: Python/Powershell, TFS, SharePoint, DevOps, Exploit frameworks, Vulnerability scanners, Azure Security Centre)
- Fluency in English

MY BENEFITS:

- A highly motivated team and an open way of communication

PROJECT INFORMATION:

- Location is in Basel (remote work from abroad will not be possible)
- As a modern company, our client manages to constantly develop further and break new ground.

ABOUT HAYS:

IT specialists hold all the cards: for its customers in industry and the public sector, Hays is looking for motivated employees who like looking at the bigger picture and growing with new challenges. We make sure that you benefit from our many years of experience in IT recruitment and will find you the right role to suit your skills and interests – all completely free of charge to you. Register with us and reap the benefits of job offers that are both interesting and relevant to your skills and experience.

MY CONTACT AT HAYS:

My contact person
Magdalena Butt

Reference number
510570/1

Contact
E-Mail: [email protected]