IT Security Manager

at  Spirii

Spirii develops and provides world-class charging products and digital solutions for customers with electric vehicles. Our Digital Development department is proud to drive a “listen, learn, and lead” culture that allows us to constantly improve our ways of working.

QUALIFICATIONS:

• Bachelor’s degree in IT, Cybersecurity, or a related field (or equivalent experience).
• 3+ years of experience in IT security or similar roles.
• Hands-on experience with MacBooks and various laptop systems, including security configurations.
• Familiarity with security best practices, including risk management and incident response.
• Basic understanding of network security, firewalls, and encryption tools.
• Knowledge of GDPR and other relevant data protection regulations.
• Strong problem-solving skills and attention to detail.
• Fluent in English, both written and spoken.

• Responsible for the development, implementation, and communication of the internal IT strategy.
• Develop and enforce security policies, procedures, and guidelines to manage risks effectively.
• Ensure that all security policies and procedures are documented and kept up to date.
• Ensure that internal IT systems and tools are configured and used according to internal security procedures.
• Ensure that security controls are effective and regularly tested.
• Work with internal and external IT teams to design secure network architectures and system configurations.
• Work closely with the engineering and product departments to ensure the integration of security practices into the software development lifecycle.
• Ensure compliance with legal, regulatory, and industry standards (e.g., GDPR, NIS-2, ISO 27001).
• Collaborate with senior management to communicate security risks and recommend appropriate mitigation strategies.
• Conduct regular risk assessments to identify potential threats to the organization’s IT infrastructure and data.
• Oversee the incident response process, ensuring timely identification, containment, and resolution of security incidents.
• Maintain detailed records of security incidents, risk assessments, and compliance audits.
• Develop and implement security awareness programs to educate employees on cybersecurity best practices.
• IT Asset management, including policies for device enrollment.
• Collaborate with external stakeholders, including vendors and regulatory bodies, to ensure comprehensive security management.