Information Security Engineer

Responsible for planning, implementing, and coordinating risk management, risk mitigation and recovery programs within their areas of responsibility. Oversees ongoing compliance efforts across technology, developing and providing controls, standards, process improvement recommendations, technical guidance, leadership, awareness, and education on compliance and information security practices.

  • Provide security advisory services support by recommending improvements in information security systems, procedures and processes based on industry best practices and innovative thinking
  • Define requirements, based on the overall information security strategy, and implement capabilities to comply with established standards to help mitigate security risks
  • Provide responses to customer security questionnaires and internal and external auditors regarding information security capabilities and controls
  • Monitor for security incidents and participate in incident response teams to contain, investigate, and prevent future information security incidents
  • Understand current and emerging security threats and design security capabilities to mitigate threats where possible
  • Stay abreast of new security technologies and integrate them into the security architecture design where appropriate
  • Analyze IT projects and roadmaps and identify security dependencies and risks, and design solutions to remediate information security risks
  • Manage all information security capabilities including threat management, vulnerability management and incident management
  • Design, implement and test information security controls in enterprise, cloud, and product environments
  • Write and enforce information security policies, standards, guidelines and standard operating procedures
  • Participate in internal Blue and Red Team activities
Qualifications
  • Proven track record for delivering results
  • Advanced interpersonal and communication skills with the ability to collaborate effectively in a team environment and promote ideas at various levels of the organization
  • Strong self-directed work habits exhibiting initiative, drive, creativity, maturity, self-assurance, professionalism and the ability to autonomously manage multiple concurrent projects
  • Advanced analytical and decision-making skills
  • Minimum of 7 years of hands-on technical experience designing, implementing, and supporting information security solutions in enterprise and cloud environments
  • Expert-level knowledge of security principles and technologies in application, infrastructure, network, cloud and endpoint security
  • Experience working with security vendors to evaluate products, analyze security functionality and submit feature requests
  • Experience with Linux, Windows and Mac OS X operating systems
  • Experience with scripting languages, data structures, and API integrations
  • Previous consulting or sales engineering experience is ideal
  • Bachelor’s degree (Master’s degree is ideal) in computer science or equivalent experience
  • CISSP or SANS GIAC certification
Benefits
  • A start up culture/working environment combined with all the financial and stability advantages of working for a large PE backed business
  • An opportunity to have a real impact on the global Life Sciences industry, and specifically how quickly drugs move from the Discovery stage through to Market Launch and commercialization
  • 30 working days of vacation
  • Active volunteering community, with 40 paid hours of volunteering time
  • Private Health and Life & Disability insurances.
  • Tax-free benefits (Ticket Restaurant scheme, kindergarten and transport cards)
  • Agile work environment with a team of talented colleagues
  • On-site language classes (Catalan, Spanish and English)
  • Central office location in Barcelona (currently closed due Covid situation) ) with global and dynamic employee base (more than 20 nationalities)

Apply for this position

Allowed Type(s): .pdf, .doc, .docx

Related Posts