Security Analyst - CyberOps W/M
Miraflores HO - Management - ALEBS, Portugal
Air Liquide
Air Liquide Europe Business Services (ALEBS) was created in 2019 in Lisbon, Portugal with the mandate to provide financial services for Air Liquide European entities. In the space of 4 years, it has expanded to over 400 employees based in 3 office locations: Lisbon, Tomar and Guarda. The geographical scope was extended to include, besides the European affiliates also entities located in Africa, Middle-East and India, and the operational scope was extended and includes today not just Finance, but also Human Resources.
How will you CONTRIBUTE and GROW?
This role integrates into a global cybersecurity organization characterized by a rich diversity of cultures, local and global operational requirements, and complex technological landscapes.
Note: This position is open for 3 locations: Lisboa, Tomar and Guarda.
CyberOps Security Analyst:
Handle validation of operational security requests - Tickets queue
Review firewall and peering requests to verify adherence to Group policies & standards as well as industry best practices
Analyze cybersecurity tickets, including blocked website requests, Admin access, application whitelisting requests, alongside other ad hoc cybersecurity tickets
identify potential security risks and understand legitimate business needs as well as operational requirements and constraints
Vulnerability management & Ad-hoc security reviews
Manage and assess risks on vulnerabilities across critical systems including alerts generated by Group tools such as Qualys, Permanent Penetration Testing Platform (PPP), PRISMA, Security ScoreCard, Serenity, etc.
Track vulnerability and penetration testing remediation plans
Assess accuracy and completeness of ServiceNow CMDB data in relation to vulnerability management and other cybersecurity processes
Develop and Maintain Cybersecurity Dashboarding and Reporting tools
Analyze current cybersecurity Key Performance Indicators to ensure appropriate cybersecurity metrics are being reported
Compile reports around Cybersecurity KPI and distribute to identified stakeholders at defined intervals (Daily, Weekly, Monthly, Quarterly, Annually, etc)
Compliance & security controls support
Support evidence gathering of Group CDA compliance activities
Assist in maintaining compliance with organizational security policies and external regulations.
Support internal and external audits by providing technical inputs and evidence related to security controls
Are you a MATCH?
Minimum 4 years of experience in Cyber Security, risk management, and/or compliance
Certifications in information security and/or cyber security like CISSP, CISM, GSOC, MSOA, GEVA, CVA, etc.
Demonstrate understanding of risk management, IT controls and related information security standards
Knowledge of security control frameworks and standards such as SOC2, ISO 27001, NIST, etc
Experience securing cloud-based environments
Experience with regulatory requirements - GDPR, PCI, Medical, FDA, DOT, etc.
Excellent written and verbal communication skills
English C1
#LI-LR1
Our Differences make our Performance
At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.
We welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits CISM CISSP Cloud Compliance Finance Firewalls GDPR Governance ISO 27001 NIST Pentesting Qualys Risk management SOC 2 Vulnerabilities Vulnerability management
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.