Information Security Expert (m/f/n), Esch-sur-Alzette

Encevo S.A. is the holding company that leads the Encevo Group. Encevo defines the group strategy as well as governance and ensures financing for all group entities with a view to guarantee the sustainable development of the whole group. Encevo also provides, through its skilled and experienced staff of over 160 employees, various support services to group entities, including finance, treasury management, accounting, legal, human resources, facility management, internal audit, risk management and insurance. The purpose thereof is to create synergies and increase overall efficiency and effectiveness throughout the group. Further, the role of Encevo is to position the group in relation to its stakeholders (employees, shareholders, government, customers, suppliers, investors, partners, media …).

Tasks

• You develop and manage documents related to the Information Security Management System
• You harmonize and update security documents to maintain uniformity across the organization and you verify compliance with security policies, standards and regulatory requirements
• You contribute to the risk management process and framework to ensure a coherent approach by conducting security risk assessments to identify vulnerabilities in projects and initiatives and you recommend and follow up and control mitigation measures
• You follow up to ensure pen test, audit remediation steps are reviewed in due time while coordinating with internal and external stakeholders
• You maintain and implement a framework for data classification to ensure all data is accurately classified and documented, supporting future project analysis and business needs, and ensure data ownership is identified in collaboration with relevant parties
• You provide regular reporting on security operations, risk posture, and compliance status to CISO, senior management and to relevant authorities (NIS, ENTSO-E, ENISA CNPD, …)
• You manage day-to-day security requests needed form incident response (reports, analysis, follow-up) and security tests (Pen tests, config review, …)
• You develop and maintain the Security Testing Program for the Group / dedicated entity and ensure its proper execution
• You support information security training and awareness packages to be delivered to ENCEVO group wide staff
• You support the definition of roles and access permissions to ensure secure access to information systems, monitor identity and access management systems, and ensure the effective implementation of the Identity & Access Management Policy

Profile

• You hold a Master's degree in IT or equivalent
• You have at least 5 years of experience in a similar role
• You have a high capacity for analysis and synthesis, and can manage priorities effectively
• You are proactive, dynamic, and results-oriented
• You have a keen eye for details and a strong sense of discretion and confidentiality
• Highly effective verbal and written communication skills in English and French. German is a plus.