Cybersecurity Advisor (m/f)

The main objective is to ensure an effective collaboration between our businesses and the Group CyberSecurity department. As such, the CyberSecurity Advisor is responsible for:

Establishing and keeping the necessary connections with all key business stakeholders

Capturing all context information and all business needs (who are the users, what are the project deadlines and sponsors, who are the administrators, what are the applicable regulations, etc.)

Translating this information into technical inputs (what are the networks and systems involved, what is the level of criticity of the data handled, what are the applicable Recovery Time and Point Objectives, etc.)

Performing an appropriate risk analysis (what are the most important threats that we can foresee based on the information above)

Defining the mandatory CyberSecurity requirements (e.g. which authentication, filtering, encryption, content inspection, hardening, logging and monitoring measures are necessary) based on such risk analysis

Ensuring a proper handover to the CyberSecurity Projects and Service Delivery Manager in order to select the most appropriate technology, design the best architecture along with adequate technical configuration

Defining the necessary controls (e.g. intrusion tests, audits, etc.) and the proper organization to ensure that cybersecurity is managed in an efficient way

Providing the necessary inputs to the Service Delivery Manager for him to coordinate the kick-off meeting for every new project

Requesting the necessary changes in our CyberSecurity policies to the CyberSecurity Office

Advise the Communication team on the necessary awareness and training programs, based on the discussions held with the businesses

Requesting the necessary audits to the Risk & Compliance team

Reporting monthly the business requests under evaluation, requests confirmed and moving to project phase and requests discarded