Information Security Consultant - Milano, Italia - Advantio

Advantio

Azienda verificata

Milano, Italia

1 settimana fa

Inviato da:

Piero Bianchi

Reclutatore di talenti per beBee

Descrizione

About Advantio

Established in 2009, Advantio maintains an extensive team of consultants and security testing experts to provide digital security and assurance to its customers.

Originally established as a payment compliance market leader, Advantio has grown from an established and leading payment security and compliance organisation in Europe to develop its comprehensive Cyber Security and Managed Security Services expertise - offering consultancy, products, and services to support organisations to first understand or their own cyber security related business risks and then by providing suitable and affordable solutions to manage those risks effectively and to remediate against threats proportionately.

Advantio primarily serves the FinTech and Payment Card industries and is recognised by VISA as one of Europe's top Qualified Security Assessor (QSA) providers.

Role Mission:

We are seeking an experienced Security Consultant to join our team to help ensure the delivery of Advantio's consultancy, products and services, ensuring optimal quality and value to customers.

Key Responsibilities:

Perform strategic consultancy services through identification of customer needs and scoping security solutions.
Provide additional customer support to achieve compliance/certification against recognised standards such as ISO 27001, the GDPR, Advantio's Cybersecurity Maturity Assessment and PCI DSS.
Independently conduct ISO/IEC 27001:2013 implementation and audit activities.
Lead Advantio Cybersecurity Maturity Assessment and Gap Analysis engagements.
Conduct information asset discovery workshops and engagements.
Conduct risk assessment workshops and engagements.
Drive business continuity scenario tabletop exercises.
Deliver external stakeholder training and awareness presentations.
Mentor and train junior colleagues using expertise and experience.
Define the scope of planned activities through review of available documentation and resources, including stakeholder interviews.
Develop and deliver customer presentations to relay findings, recommendations, and progress reports.
Attend customer meetings to review progress on longer term engagements and ensure that stakeholder expectations are being met.
Provide support, advice and guidance when supervising or working with junior consultants.
Provide support to Advantio's internal compliance stakeholders to help ensure Advantio continues to successfully retain its ISO 27001:2013 certification, or any other designated certifications.

Skills & Knowledge:

Degree level qualification in Computer Science, Computer Engineering, IT, Cyber Security, or a related field or 5 years' experience working within an information security role
Fluency in both verbal and written English and Italian.
Demonstrable experience communicating complex information security concepts to top level (C suite and above) management.
Minimum 2 years experience in delivering consultative engagements using well known risk management and data security frameworks, standards, and methodologies.
An aptitude for understanding and documenting complex business processes.
A working knowledge of information governance concepts, including that of information assets, information asset ownership and data protection.
The ability to develop high quality presentations, policies, and operating procedures.
Ability to translate activities into easytofollow flow charts and processes.
Experience in the following areas of information assurance:
GDPR regulation
ISO/ISEC 27001:2013
Business Continuity
Supplier Management
Incident Management
Physical Security
ISO 27001 lead auditor or lead implementer qualification.

Nice To Have:

Understanding of Strategic Information Assurance and an ability to draft cyber security strategies.
Experience with secure development frameworks.
Exposure to multiple information security frameworks, for example: NIST CSF.
A cloudbased information security qualification, such as CCSK or equivalent.
Basic knowledge of computer networks (Firewall, Switch, router, OSI model, etc.).
CISMP or equivalent qualification.
CISM or CISSP qualification.

Core Competencies: