As a Cybersecurity Consultant, you will be part of a multidisciplinary team and you will work in the Digital Security division of SAI. The ideal candidate will work with stakeholders in division to identify opportunities where our digital security advisory can provide added value delivering services to clients. The team is responsible for the provision of digital security consulting services to support our customers in maintaining their business-critical activities. As a candidate you will need to have a passion for discovering new approaches, working with diverse stakeholders to improve business outcomes and sharing knowledge.The team is made of experienced and junior consultants with a mix of specialties proper to each consultant.
๐๐๐๐: ๐๐ฉ๐๐ง ๐๐๐๐ ๐ญ๐จ ๐๐๐ง๐๐ข๐๐๐ญ๐๐ฌ ๐ซ๐๐ฌ๐ข๐๐ข๐ง๐ ๐ข๐ง ๐๐๐๐๐๐๐๐๐.
๐๐ก๐ข๐ฌ ๐ฉ๐จ๐ฌ๐ข๐ญ๐ข๐จ๐ง ๐จ๐๐๐๐ซ๐ฌ ๐ก๐ฒ๐๐ซ๐ข๐ ๐ฐ๐จ๐ซ๐ค๐ข๐ง๐ ๐ฌ๐๐ญ๐ฎ๐ฉ ๐๐ง๐ ๐ฐ๐ข๐ฅ๐ฅ ๐ซ๐๐ช๐ฎ๐ข๐ซ๐ ๐ญ๐ก๐ ๐ซ๐ข๐ ๐ก๐ญ ๐๐๐ง๐๐ข๐๐๐ญ๐ ๐ญ๐จ ๐๐ ๐๐ฏ๐๐ข๐ฅ๐๐๐ฅ๐ ๐๐ฎ๐ซ๐ข๐ง๐ ๐๐๐ ๐ญ๐จ ๐ฌ๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ ๐จ๐ฎ๐ซ ๐๐ ๐๐ฅ๐ข๐๐ง๐ญ๐ฌ.
Responsibilities
Design, implementation and maintenance of Information Security, Cybersecurity and Data Protection Management Systems based on relevant standards and regulations (e.g. ISO/IEC 27001, ISO/SAE 21434, SOX, GDPR, Cookies guidelines, ...)
Support to achieve Compliance with Security and Personal Data protection standards and regulations
Design of information Security policies, guidelines, processes and procedures
Development of Information Security awareness and training initiatives (e.g. training and awareness programs, Security events, crisis and cyber incidents simulations, ...)
Information Security project management by interacting with customers from a variety of work realities, from the automotive industry to the banking sector.
Recommend industry best practices for vulnerability and threat management remediation.
Work with internal customers to determine their need for security assessments, present and explain the employed methodology, and support them with feedback and verification during mitigation.
Implementing secure SDLC, secure coding and security by design best practices
Conduct static and dynamic analysis (SAST/DAST) on a variety of code bases and platforms.
Through standard enterprise tools, discover security vulnerabilities in web and mobile applications and provide recommended remediation steps to developers.
Enforce smart CI/CD security tooling (SAST, dependencies checker)
Identify vulnerability in the source code and design of our products
Fix vulnerabilities or support development team on fixing
Develop training on secure coding techniques and security awareness for technical staff (e.g., software developers).
Qualifications
5 yearsโ experience delivering information security and infrastructure security reviews, risk and vulnerability management, technical system security configuration review
Security qualification(s) such as CISSP, CISM, CEH, CISA, SSCP, ISO 27001, IT/ Computing Certifications (Cisco, Microsoft, Oracle, etc)
Knowledge and application of information security frameworks and methodologies (e.g. NIST, ISO 27001, Data Protection, CIS Controls, OWASP) and other information security frameworks
Successful track record in working in complex environments and large complex projects
Advanced understanding of security protocols, cryptography, and security
Strong analytical and problem-solving skills
Knowledge of Agile process and principles
Customer service orientated with good problem solving and analytical skills and the ability to communicate effectively at all levels
Desirable
Experience implementing multi-factor authentication
Experience implementing security solutions
A well developed, practical understanding of Google Workspace solution
A well developed, practical understanding of SaaS technologies
Competence in Project Management best practices
