Security Compliance Engineer

at  ALTEN Romania

WHAT A TYPICAL DAY MIGHT INCLUDE

• Implements security controls that align with regulatory requirements, ensuring documented and sustainable compliance that aligns with goals;
• It enhances security positioning through process improvement, policy, automation and continuous capability evolution;
• Implement processes such as VMP (Vulnerability Management Process) to automate and continuously monitor vulnerabilities, resolve actions, mitigations and risks. Develops reporting metrics and dashboards;
• Schedule regular reviews of controls and create reports;
• Performs security controls and provides support to all stakeholders on security controls covering internal assets;
• Assess incidents, vulnerability management, scans, patch status, cybersecurity baselines;
• Documents and reports control failures and gaps to stakeholders. Provides remedial guidance and prepares management reports to track remedial activities;
• Performs other related duties as assigned;
• Achieve network and IT asset security compliance by executing compliance programs and completing documentation;
• Prevents compliance issues by collaborating with engineering and security teams, reviewing data and running compliance policies;
• Prepares compliance reports by collecting, analyzing and summarizing measurement data and trends;
• Achieve compliance by isolating and resolving compliance issues, recommending product and process changes.

EXPERIENCE & SKILLS NEEDED

• Written and spoken English;
• Other widely spoken European languages - written and spoken;
• Information technology systems and processes, network infrastructure, data architecture, data processes and protocols;
• Principles, practices, laws, rules and regulations applicable to information security management, governance and compliance;
• Incident response management;
• Preservation of confidentiality;
• Troubleshoot and operate a computer and various software packages;
• Defining problems, collecting and analyzing data, establishing facts and drawing valid conclusions;
• Preferably higher technical studies (for example: Electronics and Telecommunications, Automation and Computers, Computer Science, etc.);
• Experience in cybersecurity programs, audits, assessments, risk, remediation, or cybersecurity compliance management;
• Strong technical background with understanding and/or hands-on experience in cloud and hosted environments and IT infrastructure technologies.

Please refer the Job description for details