FBS Information Security Specialist

Your tasks

• Cybersecurity Risk Assessment: Identify, assess, document, and communicate data security and privacy risks, recommending appropriate controls and countermeasures to protect enterprise information assets.
• Threat Analysis and Risk Mitigation: Proactively identify and mitigate moderate to major cybersecurity risks, analyze threat intelligence, and support the development of effective cyber defense strategies across the organization.
• Security Assessments and Testing: Conduct third-party security risk assessments, project security reviews, business risk assessments, and security testing for existing and proposed systems.
• Vulnerability and Technical Risk Management: Perform technical and nontechnical assessments across applications, networks, infrastructure, and local and global computing environments to identify weaknesses and recommend remediation measures.
• Change and Project Security Reviews: Evaluate security implications when applications or systems undergo significant changes, ensuring that potential risks are identified and addressed before implementation.
• Security Controls and Architecture: Define and integrate appropriate security controls into business and technology processes, participate in architectural discussions, and recommend solutions that balance protection, usability, and delivery timelines.
• Regulatory Compliance: Develop and maintain processes that support compliance with applicable legal, regulatory, and internal information security requirements.
• Cybersecurity Incident Management: Lead improvements in the detection, investigation, and response to cybersecurity incidents, overseeing appropriate preventive, detective, and corrective measures when threats are identified.
• Security Configuration and Compliance Monitoring: Review and approve advanced security configurations, investigate unusual compliance patterns, and evaluate their impact on enterprise risk and the effectiveness of security programs.
• Audit and Remediation Management: Participate in cybersecurity audits, track findings and recommendations, coordinate remediation activities, and ensure assigned audit actions and regulatory requests are addressed accurately and within established deadlines.
• Security Policy Development: Create, review, and update information security policies, procedures, standards, and guidelines to reflect evolving threats, business requirements, and compliance obligations.
• Stakeholder Relationship Management: Build effective working relationships with local and global business leaders, IT teams, and senior stakeholders to promote security awareness and support informed decision-making.
• Cross-Functional Project Leadership: Lead initiatives involving multidisciplinary and geographically distributed teams, influencing stakeholders to develop innovative solutions to complex security challenges.
• Technical Security Advisory: Serve as a subject matter expert across key technology platforms, providing intermediate to advanced security guidance and acting as a primary point of contact for IT teams seeking security expertise.
• Security Awareness and Advocacy: Promote the value of information security throughout the organization and encourage the adoption of secure practices across business and technology operations.

Requirements

• Relevant Professional Experience: Demonstrated experience in information security, cybersecurity, IT risk management, or a related technical field, including the ability to independently manage moderately complex to advanced security assessments.
• Cybersecurity Risk Management: Strong knowledge of security risk assessment methodologies, threat analysis, vulnerability management, risk mitigation strategies, and security control evaluation.
• Technical Security Expertise: Experience assessing enterprise applications, networks, infrastructure, computing environments, and technology platforms to identify vulnerabilities and recommend effective safeguards.
• Information Security and Data Privacy: Solid understanding of data protection principles, confidentiality, integrity, availability, and the controls required to safeguard sensitive information.
• Security Testing and Assessments: Practical experience conducting security testing, third-party risk assessments, project security reviews, business risk assessments, and technical or nontechnical vulnerability assessments.
• Incident Response: Knowledge of cybersecurity incident detection, investigation, response, remediation, and continuous improvement of security operations.
• Security Architecture and Configuration: Ability to evaluate security configurations, contribute to architecture reviews, integrate security controls into technology solutions, and provide expert recommendations for complex systems.
• Regulatory Compliance and Auditing: Familiarity with information security regulations, internal control frameworks, audit processes, evidence collection, remediation tracking, and regulatory response requirements.
• Security Governance and Documentation: Experience developing or maintaining security policies, procedures, standards, guidelines, and risk documentation.
• Analytical and Problem-Solving Skills: Strong critical thinking and investigative abilities, with the capacity to interpret complex or ambiguous security findings and translate them into practical recommendations.
• Communication and Stakeholder Management: Excellent communication and relationship-building skills, with the ability to explain technical risks clearly, influence decision-makers, and collaborate effectively with technical and nontechnical audiences.
• Project Leadership: Ability to coordinate cross-functional initiatives, manage competing priorities, and work effectively with local and international teams.
• Autonomy and Accountability: A proactive, detail-oriented approach, with the confidence to make informed decisions, manage assigned responsibilities independently, and deliver results within established timelines.
• Continuous Learning: Commitment to staying informed about evolving cybersecurity threats, security technologies, industry best practices, and emerging compliance requirements.
• Language Skills: Professional English communication skills are beneficial for collaboration with international teams and stakeholders.

What we offer

• Competitive Compensation: Attractive salary package based on the role and experience.
• Performance-Based Bonuses: Additional compensation opportunities linked to performance.
• Comprehensive Benefits Package: Access to a range of employee benefits.
• Private Health Insurance: Healthcare coverage as part of the benefits package.
• Paid Time Off: Paid leave to support personal well-being and work-life balance.
• Flexible Work Arrangements: Remote and/or office-based working options, depending on applicable arrangements.
• Training and Development: Opportunities to expand your technical expertise through professional learning initiatives and development programs in partnership with recognized organizations.
• Global and Multicultural Environment: Collaborate with diverse teams and experienced professionals in an international workplace.
• Career Development Opportunities: Build your expertise in enterprise cybersecurity, information security governance, risk management, and technology protection.
• Established Professional Environment: Work within a globally recognized organization with a strong market presence and experienced leadership.
• Local Payroll and Benefits Administration: Employment administration is supported through a local Employer of Record arrangement.

How to apply

How Jobgether works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Other

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.