It Security Specialist

It Security Specialist
Viseu
Viseu, Viseu District, Portugal

Who we are

VIRTHIO

is a technology consulting company that provides services and solutions to support both national and international clients across various sectors, such as Banking, Services, Energy, among others.

We drive our clients' businesses forward through a dedicated team and ensure the allocation of highly qualified and specialized IT talent for projects in a wide range of areas, tailored to the specific needs and reality of each organization. We have IT experts working in areas as diverse as IT Consulting, Nearshore, Turnkey Projects, Blockchain, and Machine Learning.

What you'll be doing

• Conception of measures to ensure the quality of work in the form of documentation, presentations and reporting for quality assurance of the measures and work results.
• Processing/reporting of findings and anomalies addressed to the cyber security operations department from the security and compliance area.
• Identification of security potentials in the IT infrastructure for further analysis and development of solution scenarios by arrangement.
• Evaluation of technical IT security requests within the framework of the specifications of VWFS AG.
• Development of security response processes.
• Establishing and continuing security response and, IT-Risk-Management and operational hardening management processes at the operational level.
• Creation of technical specifications for IT infrastructure and other technical components and processes based on IT baseline protection and ISO 27001.
• Development of response components for infrastructure, platforms, applications and other technologies.
• Coordination and control of security response and operational hardening management processes to close security gaps in a timely manner in combination with operational IT Security-Risk-Management.
• Monitoring of security ticket queues based on the IT security requirements of governance areas and external regulators.

What you will need to succeed

• At least 3 years of operational professional experience in the areas of IT infrastructure and IT security (ideally risk management and security response).
• At least 2 years of operational experience in the field of IT security.
• Confident handling of all organizational levels of IT.
• Experience in the field of securing standard technologies and remediation of vulnerabilities.
• Knowledge of IT audits in the evaluation and technical implementation of measures based on ISO 9001 or other quality management systems techniques.
• Identification of security vulnerabilities and elaboration and presentation of alternative solutions based on the CVE standard.
• Experience for the commissioning and operation of an ISMS (information security management system).
• In-depth of the measures from the Annex to ISO 27001 (training will be provided for the local IT-Grundschutz. It is a freely available procedure developed by the German Federal Office for Information Security (BSI)).
• Advanced knowledge of reporting applications to display IT security and compliance data.
• Certifications ITIL Foundation (ITIL V3 Minimum) and Prince2 (or similar).
• IT security certifications according to ISO27001.
• Technical project management experience desirable.
• Implemented at least one IT security project (up to 100
  - days).
• Dealing with escalations (internal and external impact).
• Clear and precise communication with technical staff, management and stakeholders, both written and verbal.
• Preparation and
  - up of results presentations and management documents.
• Strong analytical and structural competence and ability to organize himself independently.
• Speaks and writes English fluently (At least B2 level).
• Availability to travel.

What the company will offer you

• A company with an open mindset, where each team member contributes to organizational growth – all ideas are welcome, as is independent thinking;
  
  
  
  
• Opportunity to work in a dynamic and collaborative environment;
  
  
  
  
• Career progression and continuous learning opportunities;
  
  
  
  
• Flexibleworking hours and hybrid work model;
  
  
  
  
• Participationin innovative projects.

Next Steps

If you are interested in this opportunity, we would appreciate it if you could share your updated CV with us. Alternatively, if you're looking for new professional challenges, feel free to get in touch — we'll be happy to talk about other career options with you.