Information Security Operations Specialist
Lufthansa Industry Solutions
/job-details/5200
Kjo shpallje nuk pranon më aplikime. Nuk ka shpallje që përputhen saktësisht me këtë URL.
Shiko punët aktive.
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem.
In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
**Tasks**
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem. In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
- Identify, assess, and mitigate IT security risks across systems and processes
- Establish and maintain a risk management framework including risk identification, evaluation, treatment, and tracking
- Perform regular risk assessments, define risk mitigation plans, and ensure follow-up on remediation actions
- Drive vulnerability management, including identification, prioritization, and remediation of security vulnerabilities
- Define security requirements for interfaces, processes, software development, and related technologies, and operate tools to enforce them
- Continuously improve the Information Security Management System and support ISO 27001 certification
- Act as the main contact person for all IT Security-related topics
- Support internal and external audits on implemented IT security measures
**Benefits**
- Vacation / Christmas bonus
- Flexible working hours
- Special deals with selected partners
- Employee events
- Hybrid working possible
- Mentoring
**Requirements**
- At least 2 years of experience as an IT Security Expert
- Professional experience with PCI DSS in technical, compliance, or audit functions
- Strong understanding of risk management principles and security risk frameworks
- Proven experience in risk assessments, risk treatment, and vulnerability management processes
- Knowledge of standards: OWASP ASVS, OWASP Top 10, CWE Top 25
- Ability to analyze and identify security issues and implement effective solutions
- Good understanding of cloud architectures, modern development practices, and digital product ecosystems is a plus
- Experience with Container Security and DevSecOps
- Familiarity with frameworks such as ISO 27001, NIST, COBIT, or ITIL is a plus
- Experience working in cross-functional teams in an agile environment
- Very good command of English language
**Information Security Specialist**
to act as a key guardian of our digital ecosystem.
In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
**Tasks**
We are looking for a
**Information Security Specialist**
to act as a key guardian of our digital ecosystem. In this role, you will ensure that security and PCI compliance are embedded across all stages of development, enabling teams to build secure, scalable, and innovative digital products.
- Identify, assess, and mitigate IT security risks across systems and processes
- Establish and maintain a risk management framework including risk identification, evaluation, treatment, and tracking
- Perform regular risk assessments, define risk mitigation plans, and ensure follow-up on remediation actions
- Drive vulnerability management, including identification, prioritization, and remediation of security vulnerabilities
- Define security requirements for interfaces, processes, software development, and related technologies, and operate tools to enforce them
- Continuously improve the Information Security Management System and support ISO 27001 certification
- Act as the main contact person for all IT Security-related topics
- Support internal and external audits on implemented IT security measures
**Benefits**
- Vacation / Christmas bonus
- Flexible working hours
- Special deals with selected partners
- Employee events
- Hybrid working possible
- Mentoring
**Requirements**
- At least 2 years of experience as an IT Security Expert
- Professional experience with PCI DSS in technical, compliance, or audit functions
- Strong understanding of risk management principles and security risk frameworks
- Proven experience in risk assessments, risk treatment, and vulnerability management processes
- Knowledge of standards: OWASP ASVS, OWASP Top 10, CWE Top 25
- Ability to analyze and identify security issues and implement effective solutions
- Good understanding of cloud architectures, modern development practices, and digital product ecosystems is a plus
- Experience with Container Security and DevSecOps
- Familiarity with frameworks such as ISO 27001, NIST, COBIT, or ITIL is a plus
- Experience working in cross-functional teams in an agile environment
- Very good command of English language
Nuk ka shpallje që përputhen saktësisht me këtë URL.
Shpallje të tjera aktive
- Cisco ACI Architect — ViaTech
- Real Estate Agent — RealEstate'al
- Qlik Sense Developer — Engineering Albania
- Systems Administration (Devops) — SICPA
- Associate Account Manager — Slice
- HR Data Specialist — SICPA
- Agents(es) de production — CRUSTA C
- Associate Account Manager — Slice
- Supervisor Territory B2C — Philip Morris International
- Microsoft Workplace / Workspace Consultant — ViaTech
- Senior Full Stack Engineer (Architecture & AI-Driven Development) — Itecor
- Customer Sales Representative — HMD Trucking Inc.
- Transformation Manager — A1 Telekom Austria Group
- 📢 ПОВИК ЗА НАДВОРЕШЕН ЕКСПЕРТ / ЕКСПЕРТСКИ ТИМ — СОС Детско Село Македонија | SOS Children's Villages Macedonia
- MuleSoft Architect — Proxiad SEE
- Раководител на стручни соработници и аптекарска продажба — Teva Pharmaceuticals
- Software developer - Full Stack — SICPA
- Social Media & Growth Manager — Growth Solutions ShPk
- Application Support Specialist — ASEE
- Associate Account Manager — Slice
- Full Stack Engineer — BIMCAD Studio
- Developer SAS / Python — ViaTech
- Agjent Shitjesh — OMNES agency
- Ai Engineer — Oracle Law Global
- Payroll & HRIS Specialist — Ditë e Natë
- GCP Technical Team Leader with French — Proxiad SEE
- Senior React SDK Engineer — Stream
- Systems Administration (Devops) — SICPA
- Social Media Sales Representative — Plateful
- Video Editor — Aurcode
