Information Security Operations Specialist
Lufthansa Industry Solutions
/job-details/5200
Kjo shpallje nuk pranon më aplikime. Nuk ka shpallje që përputhen saktësisht me këtë URL.
Shiko punët aktive.
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem.
In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
**Tasks**
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem. In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
- Identify, assess, and mitigate IT security risks across systems and processes
- Establish and maintain a risk management framework including risk identification, evaluation, treatment, and tracking
- Perform regular risk assessments, define risk mitigation plans, and ensure follow-up on remediation actions
- Drive vulnerability management, including identification, prioritization, and remediation of security vulnerabilities
- Define security requirements for interfaces, processes, software development, and related technologies, and operate tools to enforce them
- Continuously improve the Information Security Management System and support ISO 27001 certification
- Act as the main contact person for all IT Security-related topics
- Support internal and external audits on implemented IT security measures
**Benefits**
- Vacation / Christmas bonus
- Flexible working hours
- Special deals with selected partners
- Employee events
- Hybrid working possible
- Mentoring
**Requirements**
- At least 2 years of experience as an IT Security Expert
- Professional experience with PCI DSS in technical, compliance, or audit functions
- Strong understanding of risk management principles and security risk frameworks
- Proven experience in risk assessments, risk treatment, and vulnerability management processes
- Knowledge of standards: OWASP ASVS, OWASP Top 10, CWE Top 25
- Ability to analyze and identify security issues and implement effective solutions
- Good understanding of cloud architectures, modern development practices, and digital product ecosystems is a plus
- Experience with Container Security and DevSecOps
- Familiarity with frameworks such as ISO 27001, NIST, COBIT, or ITIL is a plus
- Experience working in cross-functional teams in an agile environment
- Very good command of English language
**Information Security Specialist**
to act as a key guardian of our digital ecosystem.
In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
**Tasks**
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem. In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
- Identify, assess, and mitigate IT security risks across systems and processes
- Establish and maintain a risk management framework including risk identification, evaluation, treatment, and tracking
- Perform regular risk assessments, define risk mitigation plans, and ensure follow-up on remediation actions
- Drive vulnerability management, including identification, prioritization, and remediation of security vulnerabilities
- Define security requirements for interfaces, processes, software development, and related technologies, and operate tools to enforce them
- Continuously improve the Information Security Management System and support ISO 27001 certification
- Act as the main contact person for all IT Security-related topics
- Support internal and external audits on implemented IT security measures
**Benefits**
- Vacation / Christmas bonus
- Flexible working hours
- Special deals with selected partners
- Employee events
- Hybrid working possible
- Mentoring
**Requirements**
- At least 2 years of experience as an IT Security Expert
- Professional experience with PCI DSS in technical, compliance, or audit functions
- Strong understanding of risk management principles and security risk frameworks
- Proven experience in risk assessments, risk treatment, and vulnerability management processes
- Knowledge of standards: OWASP ASVS, OWASP Top 10, CWE Top 25
- Ability to analyze and identify security issues and implement effective solutions
- Good understanding of cloud architectures, modern development practices, and digital product ecosystems is a plus
- Experience with Container Security and DevSecOps
- Familiarity with frameworks such as ISO 27001, NIST, COBIT, or ITIL is a plus
- Experience working in cross-functional teams in an agile environment
- Very good command of English language
Nuk ka shpallje që përputhen saktësisht me këtë URL.
Shpallje të tjera aktive
- COORDINADOR DE SOPORTE A VENTAS — Estafeta Mexicana, S.A. de C.V.
- Site Civil Engineer — IPM Steel
- kıdemli yazılım mühendisi — Facturino Dooel
- Inside Sales Representative — Slice
- Tax Junior Consultant - VAT Team — Deloitte
- Dispatcher — Baca Transport LLC
- Telco Network Architect — Avenga
- Expert-Comptable Mémorialiste (H/F) — L'Usine Nouvelle
- Praca dodatkowa w Sklepie Dealz - pomoc świąteczna | PH KARUZELA — Dealz Poland
- Senior Engineer II, Electrical Systems Technical Execution Lead — Schneider Electric
- Field Property Adjuster-Hollis Center, ME — Allstate
- AI Engineer — DEPT®
- Senior Forward Deployed Engineer — Refractal
- Senior Marketing Strategist — X-IDENTITY
- Digital Marketing Manager — Delta Lektorat
- Valet/femme de chambre H/F — ASR BRETAGNE NETTOYAGE
- Агент за телефонска продажба — A1 Makedonija
- KONKURS PUNE – GOMISTER — AutoGoma Ferizaj
- Executive Assistant — The One Percent Club
- Chief Executive Officer — Romansa Wedding&Memories
- Супервизор во производство / Production foreman — Kentaur Impex
- Accounting Analyst II — Viskase Companies, Inc.
- COORDINADOR DE INFRAESTRUCTURA — Estafeta Mexicana, S.A. de C.V.
- Supervisor, Phone Operations — Slice
- Agjent pronash — Coldwell Banker Albania
- Social Media & Community Senior Specialist — Dompé
- Tax Junior Consultant - VAT Team — ACCA Careers
- (SDR) Sales Development Representative – German C2 - Mid-Market IT (m/f/d) — Advantcode
- Client Sales Consultant — Silverlight Research Group For Recruiters 4
- Collaborateur Comptable (H/F) — L'Usine Nouvelle
