Senior Regional Security Analyst

Location: Pozuelo de Alarcon

InformationSecurity& ITRiskSeniorAnalyst

We believe that we make a difference every day. To do that, we need committed and engaged employees. Our people are accountable for delivering world-classserviceand they are passionate about making the world a safer and more secure place. Our teamsoperatewith integrity and respect for one another fueled by an entrepreneurial spirit. We are building a high-performance organization through investing in our people with great development and growth opportunities.

Do you want to have an impact every day by making people safe - and bringing them peace of mind? Interested in being part of a dedicated, passionate team which believes that security is ahumanright? Looking to join a company where innovation and technology are at the heart of its solutions?

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads.Aneffective communicator,you’llbe a confident team playerwitha genuine passion to make things happen in a dynamic organization. Ifyou’reready to take on a wide range of responsibilities and are committed to seeking out new ways to make a difference, this role is for you.

Job purpose

We haveoneglobalrole,Information Security & ITRiskAnalyst,availablein Madrid(Spain)reporting to theInformation SecurityManager, you willbe responsible forsupporting thegovernance,risks,andvulnerabilitiesprogram.Your role willalsosupport the implementation ofourorganization’s strategiesregardingInformation Security and IT controlsbymaintainingand developing newways of doing things andcreating business relationships transversally inTechnology areaand across the business units.

This rolewillbe responsible forcoordinating and performing security assessment functions and controltestingreporting and activitiesin accordance withVerisureInternal Controls, regulatory and departmentalpolicies,and procedures. Thisroleupdates andmaintainsourcontrolframeworks. Thepositionis expected to workwith internalstakeholdersandtake a lead role in ensuring the security of all information collected, used,maintained, or released byVerisureand its related risks.Thisrolewill also playan important rolein researching, developing, and analyzing technologies,processes,and assessments of our organization to implement remediation actions.

Main Responsibilities

Act as a local Security POC for Country and Regional team incidents and requests - working with all InfoSec Group functions to remediate and solve.

Cooperate with key stakeholders and use methods and facilitiesin the area ofsecurity-architecture to influence their decision making.

Work closely with the Regional InfoSec team, Security Architecture &Engineeringand the Regional IT Ops functions toassistin implementing projects and achieving country specific security targets

Support tomaintainand developour riskcontrolframework and processes that alloweffectiveInformation Security & ITmonitoring, management andmitigation aligned with businessobjectives.

Support to perform risk assessment and risk management activities across our organizationand our vendorsand drive standardization and centralization of control practices and ambassadorcentral processes.

Support to developsecurity standards, procedures,policies and improveoursecurity positioning through process improvement, policy automation, and the continuous evolution of capabilities.

Support toimplementprocessesto automate and continuouslymonitorinformation security& ITcontrols, exceptions, risks& vulnerabilities, testingacross a range of data processing activities,functions,and entities.

Support, perform and control the full audit cycle overInformation Security & ITcontrols effectiveness and compliance with all applicable directives and regulations.

Required Qualifications

Minimum qualifications

• Bachelor’scomputer Information Systems or related disciplineandwith almost 5 years of experience as sysadmin “Linuxor Windows”, and almost2yearof direct experience in information security, with a main emphasis onInformation Securityrisk Analysis.
• A pragmatic approach developed through hard won experienceworkingin/withinfosecdepartmentsand direct experiencesupporting process to:
• Support to define&executeofanInformation Security & ITrisk control framework, not onlyinternallybut alsofor third-partyand partners.It is keyalsohaveexperiencedin documenting security procedures,policies,and standards.
• PerformInformation Security & ITassessments andsupportingcompliance and maturity assessments using international standards and best practices from variousindustries.
• Ensurethat all risks,vulnerabilities,andnon-conformitiesare activelymanaged,monitored,documented,and mitigated if possible.
• DefineandtrackingKPIs/KRIsand generating reporting adapted for different levelsand stakeholders.
• PerformInformation Security & ITcontrols auditsand executing remediation plansnot only internally but also thirdpartyandpartners.
• Support the process of conducting BIAS and defining plans to ensurethe continuity of the business in case ofa disruption.

Work experience in a professional environment preferred, including

• Sysadmin knowledge inWindows and Azureorlinuxand AWS
• Strong knowledge of IAMin Microsoft platform Domains & Entra-ID
• Demonstrated IA skills
• Demonstrated planning and problem-solving skills.
• Knowledge of identity management standards,vulnerabilitymanagementand business continuity.

Basic knowledge innetworking “routing,Firewalls,..”

• Knowledgeinsecurity tools. WAF, NACs,EDR,..
• Ability to successfullysupportaudits (external,internaland third-party ones), compile evidence, and organize audit responses.
• Thorough understanding of market structures, including relevant regulatory compliance requirements (PCI DSS, SOC2 ,NIST, GDPR,COBIT, ITIL,etc.).
• Fluent written and verbal communication skills inEnglish.
• Travel availability.

Preferred qualifications /Personal Characteristics

• Proficient with MS Office, project management, and at least one GRC tool(recommended).
• Familiarity withInformationsystemsauditing, monitoring, controlling, andprocessassessment.
• Familiar with current home security / smart home technologies, future developments and understanding of business models behind them.