Senior IT Security Specialist

About Us

ERGO Technology & Services S.A. (ET&S S.A.) was established in January 2021 following the integration of ERGO Digital IT and Atena into one entity, leveraging both companies strengths and best practices.

ET&S S.A. belongs to ERGO Technology & Services Management AG, the technology holding of ERGO Group AG, supporting millions of internal and external customers with state-of-the-art IT solutions to everyday problems.

Discover how we implement AI, IoT, Voice Recognition, Big Data science, advanced mobile solutions, and more to accommodate our customers’ future needs worldwide.

Become a part of the digital revolution and apply to join us!

About the role

Senior IT Security Specialist role as a member of ITSO Team is dedicated to highly experienced, tech-skilled person with an understanding of cybersecurity threats along with a knowledge of cybersecurity Framework (NIST). As a part of 1st Line of Defense, the Team of IT Security Specialists will be responsible for many operational activities in IT Security topics organization. Senior IT Security Specialist will take care of most challenging tasks at high difficulty level for tech expertise (for example coordination of SecSDLC Policy’s implementation). That brings a great opportunity to demonstrate and share wide scope of IT Sec knowledge within and beyond ERGO Technology & Services S.A.

How you will get the job done

• creating security guidelines and instructions based on requirements from policies and standards
• contacting multiple Teams/Software Developers/Project Managers/Architects in the scope of verification of security standards in many international projects
• performing IT Risk Assessments and Vulnerability Assessments
• cooperating with the local Risk Management Team (2nd line of defence), ISO and Global IT Security
• initiating and performing awareness campaigns, expanding IT security awareness in cooperation with many teams (SIRT, I&O, HR, Comm’s)
• creating and implementing critical IT Security Framework Policy’s (Work Instruction Level), high level of complexity (Cloud Security, SecSDLC)
• reviewing technical documentation
• day-to-day IT risks management (IT Risk Assessment, Vulnerability Assessment)
• IT Projects security documentation processing (Security Concepts)
• monitoring compliance and updating internal Cyber Security framework standards

Skills and experience you will need

• fluency in English
• +5 years of working experience within similar roles in large enterprise
• university degree in IT, Cyber Security or other IT-related studies or proven experience in (IT) security
• some Cyber Security certificates like CISSP, CompTIA Security+ or relevant
• experience in SecSDLC implementation will be an advantage
• knowledge of Cloud Security
• knowledge of the NIST Framework
• knowledge of network infrastructure in Architecture
• excellent analytical thinking and problem-solving skills
• good planning and organizational skills
• attention to details
• interest in various fields of IT
• ability to work independently and remotely in a team (coordination, reliability, and communication)