Process Engineer

About the company

Important Financial Group.

Your tasks

Implementation of technical and organizational safeguards to protect the continuity of IT services.

Development of strategies and plans for the implementation of information asset control processes.

Design and implement plans for the integration of newly acquired organizations, in a secure manner and maintaining information risk at an acceptable level.

Conduct and resolve technical problems that may impact technology integration efforts. Provide the first line of expert advice on the Financial Group's Information Security standards, policies, and processes, security best practices, and key industry regulations regarding Information Security.

Actively participate in the execution of the annual plan to carry out Information Security risk assessments with an Internal Control focus, on DGA TI internal processes, business processes related to IT use, and on proposals for new projects involving IT-related processes.

Propose internal controls that guarantee the confidentiality, integrity, and continuity of the information involved in internal IT processes, IT-related business processes, and on new project proposals.

Monitor the implementation of recommendations originating from the conducted risk analyses. Supervise remediation projects for short, medium, and long-term issues implemented through the information security program aligned with the Financial Group's Information Security strategy. This may include managing relationships with Information Security and Control teams and other IT teams, participating in comprehensive projects.

Supervise the implementation of reliable controls on logical information protection, vulnerability management, application security, and application change control. Develop tactical plans to manage risk areas that jeopardize information processing, infrastructure availability, confidentiality, continuity, and integrity of information assets. Escalate delays in plans or when customer information protection is compromised. Identify synergy opportunities to cost-effectively implement information security processes and infrastructure that have reached maturity in other subsidiaries.

Design, develop, and report metrics to demonstrate progress in the implementation of the Information Security program and escalate critical issues.

Escalate Risk Acceptance or Deviation letters to the Information Security Directorate for approval.

Requirements

EDUCATION Bachelor's degree in Economics – Administration, Informatics, or Systems Engineering. Completed.

English: Advanced

Courses: COBIT, ISO 278001, PMBOK

Experience Experience in the implementation of IT security principles, methods, practices, policies, and tools.

Knowledge of IT control frameworks or standards, assessment, and information security.

Experience in information security and/or risk analysis.

Knowledge of at least 2 or more of the following software: RACF, Tandem, Safeguard, Active Directory.

KNOWLEDGE/TOOLS

• Knowledge of Office
• Experience in Information Security.

• Result-oriented.
• Good communication.
• Teamwork.
• Attention to detail.
• Organization
• Analytical Thinking
• Customer orientation