Senior Professional, It Security Risk And Compliance

1 semana atrás


Lisboa, Lisboa, Portugal Grabjobs Portugal Tempo inteiro

IT Security and Compliance Professional , All CCEP Locations Job purpose Be part of the Information Security Risk and Compliance team, to manage Information and Cyber Security risks through effective identification, assessment, decisioning, mitigation treatment via control implementation, and active monitoring through measurement, reporting and assurance activities.

This position works with stakeholders across all of CCEP, in all business units, countries, departments, BPT and the wider Information Security teams to ensure compliance to risk and controls design, defined by regulation, local law and

CCEP:
Working with stakeholders and control owners on driving performance, continuous improvement and maturity. Driving process and governance improvements within and outside the team that will help strengthen our ISRC landscape.

Maintaining security policy governance and lifecycle, executing an effective end to end Information Security program while supporting internal and external audits from evidence submission through to finding remediation.

What will be expected of you (Aspiring) Subject Matter Expert for InfoSec Risk and Compliance related topics (e.g. NIST, NIS2); Maintain ISRC framework and compliance performance through GRC dashboarding; Provide consultancy and technical expertise on risk mitigation and control maturity activities; Produce Management reporting on Information Security Risk and Control Performance Indicators; Facilitate the Information Security Policy and Standards annual review cycles and policy exceptions and exemptions management; Deliver Information Security risk assessments at the corporate- and local levels.

Including:
assessment facilitation, report creation of risk decisioning, mitigation planning and action tracking, maintain all evidences and progress updates on the InfoSec risk register; Perform periodic self-assessment of risk and controls, health checks, scoring, mitigation, and continuous improvement; Work collaboratively with the independent assurance functions – Internal and

External Auditors:
Support and facilitate audit evidence collection and secure storage Provide tracking and management reporting of all Audit findings Manage InfoSec control compliance attestation, working with the control owners providing 2nd Line of Defence oversight; Build a strong network with key stakeholders such as: Enterprise Risk Management, Business Continuity & Resilience Team, Corporate Security, Finance Internal Controls Team, Internal Audit; Qualifications required Bachelor's degree in Computer Science, Management of Information Systems, Business, or related field 2+ years of IT experience with 2+ years of Information Security experience or similar English: proficiency (must)

Desirable:
Qualification in Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or similar; Experience required Strong communication skills both verbal and written with demonstrated effective team working in a multi-cultural international environment Working collaboratively with Internal- and External auditors Information Risk Management methodology and tools Implementing a Security control frameworks such as ISO 27001/2/5, NIST or similar Demonstrated track record of success in delivering projects/audits with budgetary constraints Process design and implementation skills, and mindset of continuous improvement to support the achievement of organisational goals and strategies Good analytical and planning skills combined with independent, goal- and process-oriented way of working Managing and maintaining Information Security and Risk & Compliance governance structure; Proven experience in navigating complex organizations with creative problem solving Experience in the consumer product market, beverage industry or logistics Technical skills required Knowledge of regulatory environments applicable to US publicly traded companies (SOX), Information Security, data privacy regulations and NIS2; Knowledge of Salesforce platform and specific Salesforce auditing standards, requirements or characteristics; Knowledge of Information Security Management Systems and Security Control Frameworks; Ability to implement ServiceNow GRC workflows across the organization; Behavioural competencies High communication skills using assertiveness and negotiation skills within a multi-cultural international organisation; Ability to work independently within a remote team; Conscientiousness, analytical and creative in thought and action; Ability to quickly adopt to situations and learn new competencies; Passion for collaborating with customers, partners, and co-workers to achieve successful outcomes; Advocate for change – challenge the status quo with proposed and improved solutions;

  • Lisboa, Lisboa, Portugal Coca-Cola European Partners Tempo inteiro

    IT Security and Compliance Professional, All CCEP Locations Job purpose Be part of the Information Security Risk and Compliance team, to manage Information and Cyber Security risks through effective identification, assessment, decisioning, mitigation treatment via control implementation, and active monitoring through measurement, reporting and assurance...


  • Lisboa, Lisboa, Portugal BNP Paribas Tempo inteiro

    CLOUD RISK AND CYBER SECURITY SENIOR OFFICER (JOB NUMBER:2402RSK17645_L)About the job This role is in alignment with 2LoD involvement required on BNP Paribas dedicated hybrid Cloud that is core of Cloud Strategy.The scope of the role involves developing, implementing and managing: 1) Cloud technology risk and operational risk management framework including...


  • Lisboa, Lisboa, Portugal Crédit Agricole Assurances Tempo inteiro

    Risk, Compliance and Security Manager M/F Algés, Lisboa Risk, Compliance and Security Manager M/FLisboa Lisbon, Lisbon, Portugal - Assuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances...


  • Lisboa, Lisboa, Portugal Crédit Agricole Assurances Tempo inteiro

    Risk, Compliance and Security Manager M/F Algés, Lisboa Risk, Compliance and Security Manager M/FLisboa Lisbon, Lisbon, Portugal Assuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group...


  • Lisboa, Lisboa, Portugal Tn Portugal Tempo inteiro

    Risk, Compliance And Security Manager M/FLisboa Lisboa, Lisboa, Portugal col-wideJob Description:Description du- Assuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group (CAA); Promoting...


  • Lisboa, Lisboa, Portugal Truphone Tempo inteiro

    Risk & Compliance Auditor - Information Security | Truphone Careers Personal EN Support Log in Products Technology Resources Company Contact us COMPANY Our story Offices Partner Security Careers Contact Risk & Compliance Auditor - Information SecurityInformation Security Location: Lisbon, Lisbon, Portugal Posted date: 9/8/2023 1GLOBAL - Seamless...


  • Lisboa, Lisboa, Portugal Innowave Tempo inteiro

    InnoWave is looking for a Governance, Risk and Compliance Specialistto integrate our teams and support our clients based in Lisbon - Portugal.Governance, Risk and Compliance Specialist Responsibilities Be part of the definition, development and implementation of Information Security, Risk Analysis, Business Continuity, Data Protection and Privacy...


  • Lisboa, Lisboa, Portugal Tn Portugal Tempo inteiro

    Risk, Compliance And Security Manager M/FLisboaLisboa, Lisboa, Portugal col-wideJob Description:Description duAssuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group (CAA);Promoting the...

  • It Security Officer

    1 semana atrás


    Lisboa, Lisboa, Portugal It Miami Llc Tempo inteiro

    Higher education in the area of Information Technologies (preferably with a specialization in Cyber Security); Professional experienceof more than 2 years in similar functions; Proven professional experience in managing suppliers, ensuring compliance with budget, schedules and pre-defined goals; Good knowledge of good development practices and design...


  • Lisboa, Lisboa, Portugal Truphone Tempo inteiro

    Risk & Compliance Auditor - Information Security | Truphone Careers Personal EN Support Log in Products Technology Resources Company Contact us COMPANY Our story Offices Partner Security Careers Contact Risk & Compliance Auditor - Information Security Information Security Location: Lisbon, Lisbon, Portugal Posted date: 9/8/2023 1GLOBAL Seamless Connectivity,...


  • Lisboa, Lisboa, Portugal InnoWave Tempo inteiro

    InnoWave is looking for a Governance, Risk and Compliance Specialist to integrate our teams and support our clients based in Lisbon - Portugal.Governance, Risk and Compliance Specialist ResponsibilitiesBe part of the definition, development and implementation of Information Security, Risk Analysis, Business Continuity, Data Protection and Privacy...

  • IT Security Officer

    1 semana atrás


    Lisboa, Lisboa, Portugal It Miami Llc Tempo inteiro

    Higher education in the area of Information Technologies (preferably with a specialization in Cyber Security); Professional experience of more than 2 years in similar functions; Proven professional experience in managing suppliers, ensuring compliance with budget, schedules and predefined goals; Good knowledge of good development practices and design...


  • Lisboa, Lisboa, Portugal InnoWave Tempo inteiro

    InnoWave is looking for a Governance, Risk and Compliance Specialistto integrate our teams and support our clients based in Lisbon - Portugal.Governance, Risk and Compliance SpecialistResponsibilities Be part of the definition, development and implementation of Information Security, Risk Analysis, Business Continuity, Data Protection and Privacy projects;...


  • Lisboa, Lisboa, Portugal Crédit Agricole Assurances Tempo inteiro

    Description du poste: Assuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group (CAA); Promoting the implementation of a risk assessment and management system (ORSA) and an internal...


  • Lisboa, Lisboa, Portugal Dellent Consulting Tempo inteiro

    Would you like to make an impact in different industries with your work? Then this project is for you. Here you will have the opportunity to be part of a multicultural and inclusive team with global projection that contacts with areas such as consultancy, law, strategy, insurance, finance, among others.We are looking for Cybersecurity - Senior Governance...


  • Lisboa, Lisboa, Portugal Tn Portugal Tempo inteiro

    col-wideJob Description:Description du posteAssuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group (CAA);Promoting the implementation of a risk assessment and management system (ORSA)...


  • Lisboa, Lisboa, Portugal Crédit Agricole Group Tempo inteiro

    Assuming the role of 1st line Director, reporting directly to the CEO/General Manager for the Risk, Compliance and Security area, and intervening with the management bodies of the Company and the Crédit Agricole Assurances Group (CAA); Promoting the implementation of a risk assessment and management system (ORSA) and an internal control system aligned with...


  • Lisboa, Lisboa, Portugal Iqvia Argentina Tempo inteiro

    Job Overview The Information Security Risk Manager is a crucial role within IQVIA organization, responsible for helping to establish and maintain IQVIA's risk management program, which is designed to ensure that the company's IT systems and information assets are adequately protected. The individual in this position will be responsible for identifying and...


  • Lisboa, Lisboa, Portugal DataSmart Tempo inteiro

    # Think Data Be Smart #About Us: _DataSmart_ is a Portuguese company, positioning itself as a consulting company of excellence, with over 20 years of existence. We are specialized in Technologies and Information Systems services, for the Portuguese and International markets. We pride ourselves on fostering a culture of involvement, experience, and...


  • Lisboa, Lisboa, Portugal Damia Tempo inteiro

    KLx is recruiting an IT Risk and Security OfficerAbout:KLx is an IT company based in Lisbon that specializes in the banking and insurance industry. KLx is the Portuguese subsidiary of Crédit Agricole S.A., a large international banking group that provides IT Skills & Software Development services to the IT organizations within the group's business...