Information Security Expert (m / f / n)

Department : Group IT | Location : Esch-sur-Alzette | Contract : Permanent |

Job Requisition N° 19287

Your tasks

• You develop and manage documents related to the Information Security Management System
• You harmonize and update security documents to maintain uniformity across the organization and you verify compliance with security policies, standards and regulatory requirements
• You contribute to the risk management process and framework to ensure a coherent approach by conducting security risk assessments to identify vulnerabilities in projects and initiatives and you recommend and follow up and control mitigation measures
• You follow up to ensure pen test, audit remediation steps are reviewed in due time while coordinating with internal and external stakeholders
• You maintain and implement a framework for data classification to ensure all data is accurately classified and documented, supporting future project analysis and business needs, and ensure data ownership is identified in collaboration with relevant parties
• You provide regular reporting on security operations, risk posture, and compliance status to CISO, senior management and to relevant authorities (NIS, ENTSO-E, ENISA CNPD, …)
• You manage day-to-day security requests needed form incident response (reports, analysis, follow-up) and security tests (Pen tests, config review, …)
• You develop and maintain the Security Testing Program for the Group / dedicated entity and ensure its proper execution
• You support information security training and awareness packages to be delivered to ENCEVO group wide staff
• You support the definition of roles and access permissions to ensure secure access to information systems, monitor identity and access management systems, and ensure the effective implementation of the Identity & Access Management Policy

Your profile

What we offer

“Together we build the future of Luxembourg’s energy transition”

For external applications, a recent copy of the police record will be requested if you are invited for an interview.