FBS Information Security Specialist

Accountabilities

Cybersecurity Risk Assessment: Identify, assess, document, and communicate data security and privacy risks, recommending appropriate controls and countermeasures to protect enterprise information assets.
Threat Analysis and Risk Mitigation: Proactively identify and mitigate moderate to major cybersecurity risks, analyze threat intelligence, and support the development of effective cyber defense strategies across the organization.
Security Assessments and Testing: Conduct third-party security risk assessments, project security reviews, business risk assessments, and security testing for existing and proposed systems.
Vulnerability and Technical Risk Management: Perform technical and nontechnical assessments across applications, networks, infrastructure, and local and global computing environments to identify weaknesses and recommend remediation measures.
Change and Project Security Reviews: Evaluate security implications when applications or systems undergo significant changes, ensuring that potential risks are identified and addressed before implementation.
Security Controls and Architecture: Define and integrate appropriate security controls into business and technology processes, participate in architectural discussions, and recommend solutions that balance protection, usability, and delivery timelines.
Regulatory Compliance: Develop and maintain processes that support compliance with applicable legal, regulatory, and internal information security requirements.
Cybersecurity Incident Management: Lead improvements in the detection, investigation, and response to cybersecurity incidents, overseeing appropriate preventive, detective, and corrective measures when threats are identified.
Security Configuration and Compliance Monitoring: Review and approve advanced security configurations, investigate unusual compliance patterns, and evaluate their impact on enterprise risk and the effectiveness of security programs.
Audit and Remediation Management: Participate in cybersecurity audits, track findings and recommendations, coordinate remediation activities, and ensure assigned audit actions and regulatory requests are addressed accurately and within established deadlines.
Security Policy Development: Create, review, and update information security policies, procedures, standards, and guidelines to reflect evolving threats, business requirements, and compliance obligations.
Stakeholder Relationship Management: Build effective working relationships with local and global business leaders, IT teams, and senior stakeholders to promote security awareness and support informed decision-making.
Cross-Functional Project Leadership: Lead initiatives involving multidisciplinary and geographically distributed teams, influencing stakeholders to develop innovative solutions to complex security challenges.
Technical Security Advisory: Serve as a subject matter expert across key technology platforms, providing intermediate to advanced security guidance and acting as a primary point of contact for IT teams seeking security expertise.
Security Awareness and Advocacy: Promote the value of information security throughout the organization and encourage the adoption of secure practices across business and technology operations.
Requirements
Relevant Professional Experience: Demonstrated experience in information security, cybersecurity, IT risk management, or a related technical field, including the ability to independently manage moderately complex to advanced security assessments.
Cybersecurity Risk Management: Strong knowledge of security risk assessment methodologies, threat analysis, vulnerability management, risk mitigation strategies, and security control evaluation.
Technical Security Expertise: Experience assessing enterprise applications, networks, infrastructure, computing environments, and technology platforms to identify vulnerabilities and recommend effective safeguards.
Information Security and Data Privacy: Solid understanding of data protection principles, confidentiality, integrity, availability, and the controls required to safeguard sensitive information.
Security Testing and Assessments: Practical experience conducting security testing, third-party risk assessments, project security reviews, business risk assessments, and technical or nontechnical vulnerability assessments.
Incident Response: Knowledge of cybersecurity incident detection, investigation, response, remediation, and continuous improvement of security operations.
Security Architecture and Configuration: Ability to evaluate security configurations, contribute to architecture reviews, integrate security controls into technology solutions, and provide expert recommendations for complex systems.
Regulatory Compliance and Auditing: Familiarity with information security regulations, internal control frameworks, audit processes, evidence collection, remediation tracking, and regulatory response requirements.
Security Governance and Documentation: Experience developing or maintaining security policies, procedures, standards, guidelines, and risk documentation.
Analytical and Problem-Solving Skills: Strong critical thinking and investigative abilities, with the capacity to interpret complex or ambiguous security findings and translate them into practical recommendations.
Communication and Stakeholder Management: Excellent communication and relationship-building skills, with the ability to explain technical risks clearly, influence decision-makers, and collaborate effectively with technical and nontechnical audiences.
Project Leadership: Ability to coordinate cross-functional initiatives, manage competing priorities, and work effectively with local and international teams.
Autonomy and Accountability: A proactive, detail-oriented approach, with the confidence to make informed decisions, manage assigned responsibilities independently, and deliver results within established timelines.
Continuous Learning: Commitment to staying informed about evolving cybersecurity threats, security technologies, industry best practices, and emerging compliance requirements.
Language Skills: Professional English communication skills are beneficial for collaboration with international teams and stakeholders.
Benefits
Competitive Compensation: Attractive salary package based on the role and experience.
Performance-Based Bonuses: Additional compensation opportunities linked to performance.
Comprehensive Benefits Package: Access to a range of employee benefits.
Private Health Insurance: Healthcare coverage as part of the benefits package.
Paid Time Off: Paid leave to support personal well-being and work-life balance.
Flexible Work Arrangements: Remote and/or office-based working options, depending on applicable arrangements.
Training and Development: Opportunities to expand your technical expertise through professional learning initiatives and development programs in partnership with recognized organizations.
Global and Multicultural Environment: Collaborate with diverse teams and experienced professionals in an international workplace.
Career Development Opportunities: Build your expertise in enterprise cybersecurity, information security governance, risk management, and technology protection.
Established Professional Environment: Work within a globally recognized organization with a strong market presence and experienced leadership.
Local Payroll and Benefits Administration: Employment administration is supported through a local Employer of Record arrangement.