Information Security Manager

Há 1 mês


Lisbon, Portugal IQVIA Tempo inteiro

Location: Portugal, Poland, Brazil

Work model: Hybrid (1-2 days per week in the office)

This is one of a key cybersecurity role within the global Information Security organization. 
The individual fulfilling this Information Security Manager role in Vulnerability Management team will partner closely with IT professionals both within the core Global Information Security organization and those in the Global Business Units performing assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy and management.

RESPONSIBILITIES

Delivering on a portfolio of tasks as part of Vulnerability Management Service Supporting the Vulnerability Management team in vulnerability scanning and other ad hoc testing, identifying and evaluating vulnerabilities in web applications and infrastructure Conducting comprehensive vulnerability assessments and continuous monitoring across IQVIA Apply IQVIA’s vulnerability ratings to externally rated vulnerabilities to help the business prioritize remediation Support the business lead vulnerability remediation activities Maintain an oversight of existing vulnerabilities in the IQVIA estate Develop and document operational procedures and metrics in relation to carried out activities Utilize information security technical safeguards and associated procedures, analyzing output and producing relevant management information reports for further improvements in the security safeguards landscape, including vulnerability assessment, threat intelligence and patching Support audit efforts that identify technical and procedural findings, and provide recommended remediation strategies/solutions Collaborate with the business, technology teams and information security management to ensure that control deficiencies are registered and remediated Reporting regularly to management on the status of assigned activities including issues, risks and remediation actions. Support and laisse on penetration testing activities for business units

 All responsibilities are essential job functions unless noted as nonessential (N).

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES

Information system security management, information security, troubleshooting, information systems, quality assurance and control, network security, cyber threat modeling Knowledge of computer networking concepts and protocols, and network security methodologies and OSI Knowledge of industry tools for security scanning and vulnerability management solutions (Qualys, Tenable Nessus or Nexpose) Working knowledge of enterprise IT and cloud technologies such as networking, server infrastructure, operating systems (MS Windows and Linux), web applications and databases Working knowledge of cybersecurity principles, algorithms, protocols and technologies supporting encryption, authentication, access control, information systems attack patterns, intrusion detection, and network security Knowledge of IT processes (ITIL) in regulated environments Knowledge of ethical hacking principles and techniques, and Application Security Risks (eg. OWASP) Excellent written and verbal communication skills Effective organization and time management skills Ability to write with purpose, clarity and accuracy Ability to work both within a team environment and independently to initiate and prioritize tasks Ability to establish and maintain effective working relationships with coworkers and management in a global environment. Hands-on experience in security testing of web applications and infrastructure is a plus Know-how of scripting languages is a plus Experience in ServiceNow is a plus.

MINIMUM REQUIRED EDUCATION AND EXPERIENCE

Candidate should have a minimum of 3 years Vulnerability Management experience or 5 years prior experience in information assurance, incident handling, vulnerability management and vulnerability analysis, and assistance programs Candidates should possess an Bachelor's degree in Computer science, cybersecurity, information technology, software engineering, information systems, computer engineering and preferably have experience within a regulated industry environment An ITIL or project management certificates are not required but beneficial. A relevant qualification: CompTIA Security, CASP+, CEH, GIAC (GSEC, GCED etc.), SSCP or similar is a plus.

IQVIA is a leading global provider of advanced analytics, technology solutions and clinical research services to the life sciences industry. We believe in pushing the boundaries of human science and data science to make the biggest impact possible – to help our customers create a healthier world. Learn more at



  • Lisbon, Portugal IQVIA Tempo inteiro

    Location: Poland or Portugal Role As Information Security Program Manager at IQVIA, you will play a critical role in safeguarding our digital assets, ensuring the confidentiality, integrity, and availability of sensitive information. You’ll lead manage security programs, and drive compliance with industry standards and regulations. You’ll govern...


  • Lisbon, Portugal IQVIA Tempo inteiro

    Location: Poland or Portugal Role As Information Security Project Manager at IQVIA, you will play a critical role in safeguarding our digital assets, ensuring the confidentiality, integrity, and availability of sensitive information. You’ll lead manage security programs, and drive compliance with industry standards and regulations. You’ll govern...


  • Lisbon, Portugal IQVIA Tempo inteiro

    Location: Portugal or Brazil At IQVIA, we look for the very best people, and then give them meaningful work to do. We don’t simply think about careers, we think about contributions. Those who choose to work with us are joining a recognized global leader – a company uniquely positioned to help clients make the most of market opportunities and respond to...

  • Junior Information Security

    2 semanas atrás


    Lisbon, Portugal NTT DATA Tempo inteiro

    Job Description We are a multinational Business and Technology consultancy that reinvents and transforms organizations through innovation and have been ranked by Gartner as one of the top 10 IT services companies in the world. At NTTDATA we are Digital Lovers. We love technology, work with passion, with enthusiasm, in a creative and collaborative...


  • Lisbon, Portugal Devoteam Tempo inteiro

    Company Description At Devoteam, we believe that technology with strong human values can actively drive change for the better. Discover how Tech for People unlocks the future, creating a positive impact on the people and the world around us. We are a global leading player in Digital Transformation for leading organisations across EMEA, with a revenue...


  • Lisbon, Portugal IQVIA Tempo inteiro

    Role Location: Poland or Portugal Job Overview The successful candidate will play an integral role in developing the information security Risk Management framework for IQVIA and will manage risks identified through a variety of IT and operational audits. You will be responsible for managing the development of team members and will engage with senior...


  • Lisbon, Portugal IQVIA Tempo inteiro

    Location: Portugal or Poland This is a key role within the Global Information Security organization. The individual fulfilling this role will be a member of the Information Security Governance Risk and Compliance Program Delivery and Improvement team, tracking the delivery of all CISO programs and BAU activities through metrics and continuously looking...


  • Lisbon, Portugal IQVIA Tempo inteiro

    Location: Portugal or Brazil At IQVIA, we look for the very best people, and then give them meaningful work to do. We don’t simply think about careers, we think about contributions. Those who choose to work with us are joining a recognized global leader – a company uniquely positioned to help clients make the most of market opportunities and respond to...


  • Lisbon, Portugal Devoteam Tempo inteiro

    Descrição da empresa A Devoteam Cyber Trust é a unidade especializada em cibersegurança do Grupo Devoteam. Com mais de 800 especialistas localizados na região EMEA, o nosso objetivo é estabelecer a cibersegurança como um facilitador do sucesso dos negócios, em vez de um obstáculo. Utilizamos uma abordagem abrangente de Resiliência...

  • PM- IT Security

    2 semanas atrás


    Lisbon, Portugal Alter Solutions Tempo inteiro

    Job DescriptionIT Project Manager Experienced Bachelor's or Master's degree in Computer Engineering or similar areas;- Minimum of 2 to 3 years of solid experience in Project Management (with a focus on IT Security) or similar position;- Experience in IT Security / Cybersecurity topics (system computers, networks and data)- Experience in Release and...

  • PM- IT Security

    Há 1 mês


    Lisbon, Portugal ALTER SOLUTIONS Tempo inteiro

    Job Description IT Project Manager Experienced  Bachelor's or Master's degree in Computer Engineering or similar areas; - Minimum of 2 to 3 years of solid experience in Project Management (with a focus on IT Security) or similar position; - Experience in IT Security / Cybersecurity topics (system computers, networks and data) - Experience in Release...


  • Lisbon, Portugal InnoWave Tempo inteiro

    InnoWave is looking for a Cloud Security Engineerto integrate our teams and support our clients based in Lisbon - Portugal.Cloud Security EngineerResponsibilitiesQualifications in cloud services (e.g., AWS Security Architect, AWS Solution Architect, Azure)Demonstrated experience in information security and / or IT Risk Management with a focus on implementing...


  • Lisbon, Portugal InnoWave Tempo inteiro

    InnoWave is looking for a Cloud Security Engineer to integrate our teams and support our clients based in Lisbon - Portugal.Cloud Security EngineerResponsibilitiesQualifications in cloud services (e.g., AWS Security Architect, AWS Solution Architect, Azure)Demonstrated experience in information security and / or IT Risk Management with a focus on...


  • Lisbon, Portugal Devoteam Tempo inteiro

    Company Description At Devoteam, we believe that technology with strong human values can actively drive change for the better. Discover how Tech for People unlocks the future, creating a positive impact on the people and the world around us. We are a global leading player in Digital Transformation for leading organisations across EMEA, with a revenue...

  • Security Engineer

    4 semanas atrás


    Lisbon, Portugal iCapital Tempo inteiro

    Responsibilities : Build/Manage Cloud Security Programs for AWS/Azure/GCP infrastructure: Operationalize resolution of security misconfigurations. Continuous monitoring and resolution of all the vulnerabilities in cloud environment. Collaboration with DevOps to rethink routine, embrace new best practices, and drive adoption of technology standards. ...


  • Lisbon, Portugal Integer Consulting Tempo inteiro

    We are looking for a Senior Cloud Security Engineer for an on-site project in Geneva, Switzerland . Requirements: – +10 years of experience in information technology engineering – +7 years of experience in a senior engineer or security specialist role – +5 years specifically as a senior cloud security engineer – Proficiency in the detailed...


  • Lisbon, Portugal RHC Tempo inteiro

    We are seeking a highly motivated and experienced Business Development Manager to join our dynamic team in an IT Services and Cyber Security company. As the Business Development Manager, you will be responsible for identifying and capturing new business opportunities, cultivating client relationships, and driving revenue growth. You will play a key role in...


  • Lisbon, Portugal WHOW Tempo inteiro

    Perfil Técnico ! Experiencia superior a 3 anos na função ! Conhecimentos de standards internacionais - ISO 2700X, ITIL, entre outros ! Conhecimentos em análise e avaliação do impacto dos riscos de segurança informática ! Prática no desenvolvimento de estratégias e modelos de avaliação de risco de segurança informática e sua resolução !...


  • Lisbon, Portugal iCapital Tempo inteiro

    Responsibilities Work with clients, client-facing teams, and DDQ portals to receive DDQs Find the answers that best match DDQ questions Work with business units and technology teams to find artifact evidence that support the answers Escalate outstanding issues to management From time to time assist the vendor risk team with their vendor DDQ...


  • Lisbon, Portugal Vodafone Tempo inteiro

    What you’ll do To manage the implementation project rollout of Enterprise Solutions, Security domain, according to the time plan, solution design, quality, and the efficiency levels, as well as to inform periodically the Customer, to ensure that his expectations are met at transition to Vodafone. Provide technical project management, deliver the...