Security Officer

Job Description

1. Perform the in line security validations prior to the implementation

Ensure that the security requests (network flow opening in firewall, security exception on the proxies,user & admin rights management, etc.) are managed within the SLAs and accordingly to the security rules of the Group
Build and execute the reporting of the activity

2. Execute, follow, and report on the control plan

Perform the controls for the scope of infrastructures managed by the Group Digital & IT teams
Follow the remediation of the identified anomalies, and provide ad hoc support to remediate
Report the level of compliance and risk to the security officers

3. Improve the efficiency of the security processes

Define or improve the procedures to manage security requests
Build & deploy automation when possible
Take part in the Group InfraSec community to share and improve best practicesRole & responsibilities

Technical skills:

• Good knowledge of technologies and the security fundamentals of IS, the protection of IS, infrastructures and applications

• Experience in GRC topics, including knowledge of risk analysis methodologies (EBIOS, ISO 27005, etc.)and security into project

• Experience in vulnerability management and the afferent tools (vulnerability scanners, etc.)

• Ability to read & interpret architecture diagrams, network segmentation principles

• Understanding of IAM design models (RBAC, least privilege)

• Understands hardening standards (CIS benchmarks conceptually)

• Can evaluate firewall rule hygiene

• Understands secure RDP/SSH exposure controls

• Can review patching strategy

Personal skills:

• Leadership