General information
Entity
Our Mission Statement
Digital and human resources at the center of the sustainable development of our society.
In a world of continuous transformation, accelerated by technological developments and societal challenges, it is necessary to adapt in an ongoing, agile way to meet the challenges of the future.
About Inetum, Positive digital flow
Inetum is a European leader in digital services. Inetum's team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum's solutions aim at contributing to its clients' performance and innovation as well as the common good.
Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility. Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.
Position description
Profile
Infrastructures Services - Cybersecurity Engineering
Position title
IT Risk & Cyber Security Specialist M/F
Contract
Permanent contract
Mission description
- Participate and contribute to the definition and deployment of IT Risk and Cyber Strategy
- Act as company focal point with PF Central IT Risk and Cyber teams to steer the delivery of cyber services received from the Group
- Lead Cyber Security projects at company’s level and provide expertise to the entity’s projects
- Provide executive oversight across Central Europe region and other PF countries to manage operational security priorities, monitor the effective implementation of IT security initiatives, and coordinate the execution of IT cybersecurity services for Transition Services Agreements
- Perform operational security activities and controls (DLP analysis, AV, patching and other threats monitoring and reporting)
- Support investigation of cyber or operational incidents to identify the root cause, estimate the business and financial impact, collect data and reports them, defineaction plans, implement, monitor and report their progress
- Perform IT risk and security assessments on request (TSA preparation,
operational and network security, due diligence for third parties, review of
evidences on business continuity plan…), including definition and coordination of risk remediation plans and associated reporting - IT Risk managemen: perform and challenge risk assessment (RCSA), establish corrective measures with Business and IT stakeholders to reduce the identified risks. Work closely with PF RISK ORC to ensure IT risks are correctly reported and monitored. Coordinate and implement audit recommendations to ensure compliance with Group and regulatory requirements
- Serve as 1st Line of Defense for IT Risk & Cyber Security perimeters, perform the analysis of inputs received from several different stakeholders to execute the IT control campaigns, define remediation plans accordingly
- Coordinate the execution of the awareness campaigns to increase the level of awareness related to IT Risk & Cybersecurity within company
- Coordinate the execution of Business Continuity and Crisis Management exercises of the company
- Deploy sustainable and efficient coverage of IT risk, cyber and continuity
activities, including relevant indicators and reporting system - Adopt proactive, facts-based and results-focused approach to ease decision making process
- Anticipate Strategic and Business evolutions to address impacts on the assigned perimeter
Profile description
- At least 8+ years of relevant experience in IT Risk Management and Cyber Security, preferably for international financial institutions or shared service centers
- Expert knowledge notably in network security, endpoint security and data loss prevention systems, Identity and Privileged Access Management, risk and security posture assessment
- Good knowledge in Third Party Risk management, application security, secure coding practices, OWASP, Static or Dynamic Application Security Testing (SAST, DAST)
- Effective experience in execution of controls plan, procedures creation, review and adaptation on IT Risk, cyber security and continuity framework, successful delivery of IT Security projects
- Proactive attitude, excellent analytical and problem-solving mindset with strong attention to detail
- Good interpersonal skills and cooperative attitude to manage multiple
stakeholders and providers in an international context - Excellent verbal and written communication skills in English to formalize and produce reporting (French is a plus)
Position location
Job location
Romania
Location
Bucharest, Hybrid
Candidate criteria
Skills
