IT Security Consultant (m/f/d)

THIS OPENS THE DOOR TO YOUR FUTURE: YOUR TASKS

• The IT Security Consultant a member of the IT Security team and works closely with the other members of the team to develop and implement a comprehensive IT security program. This includes defining security policies, processes and standards. The Security Consultant works with the IT department to select and deploy technical controls to meet specific security requirements, and defines processes and standards to ensure that security configurations are maintained
• Works with dormakaba's business units and with other risk functions to identify security requirements, using methods that may include risk and business impact assessments.
• Assists in the coordination and completion of IT security operations documentation.
• Works with the IT Security Architect and IT Security Manager to develop strategies and plans to enforce security requirements and address identified risks.
• Assists in the development of security architecture and security policies, principles and standards.
• Participates in the enterprise architecture (EA) community and provides strategic guidance during the EA process.
• Researches, evaluates, designs, tests, recommends and plans the implementation of new or updated information security technologies.
• Provides oversight and management of audit finding remediation, including generating requirements for full remediation, providing feedback and suggestions on managerial responses to findings, and tracking progress and providing status and updates to the enterprise compliance team for reporting purposes.
• Provides second- and third-level support and analysis during and after a security incident.
• Assists security administrators and IT staff in the resolution of reported security incidents.
• Advice and support internal customers with a focus on IT security.
• Accompanying IT projects as an IT security consultant.
• Documentation of IT Security Landscape, Processes and Solutions.

WE PUT TRUST IN YOU: YOUR SKILLS

• Proficient in Incident Management and Response.
• Proficient in preparation of Security reports, dashboards and documentation.
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls.
• Experience with Threat Modelling and corresponding Attack Frameworks.
• Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans.
• Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 2700x and the ITIL, COBIT, National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS) frameworks.
• Knowledge of the fundamentals of project management, and experience with creating and managing project plans, including budgeting and resource allocation.
• In-depth knowledge of risk assessment methods and technologies.
• Understanding of business applications, including ERP and financial systems.
• Technical knowledge of operating systems, Microsoft Windows, Linux and a wide range of security technologies, such as network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools.
• Knowledge of Cloud solutions and technologies for Example MS Azure and AWS.
• Experience in developing, documenting and maintaining security policies, processes, procedures and standards.
• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
• Audit, compliance or governance experience is preferred

WHAT YOU CAN TRUST IN: A FULFILLING WORKPLACE

• Best opportunities in a globally operating company with a family business culture
• Attractive salary package
• Development opportunities
• Employee support program
• Monetary benefits (online discount system for shopping, travel, insurance etc.)