Přidáno 1 month ago

IT Security, Risk and Compliance Head – Network and Unified Communication and Collaboration (UCC)

LokalitaHlavní město Praha

PoziceManager

Datum2020-07-29

OborIT and Telecommunications




IT Security, Risk and Compliance Head – Network and Unified Communication and Collaboration (UCC)


IT Security, Risk and Compliance Head – Network and Unified Communication and Collaboration (UCC)
  1. Job Purpose

  • Support the Group Head of IT Security, Risk and Compliance and Group Head of Network and UCC with ensuring Confidentiality, Integrity and Availability of the Adecco Group Global Network and UCC Products/Technologies
  • Implement and continuously improve an effective and efficient Information Security Management System in line with Group IT Security Strategy, Policies and Standards within the Network and UCC Organization.
  • Ensure that operational, legal, regulatory and security risks for Network and UCC Products/Technologies are assessed and mitigated with effective controls in accordance with the business requirements and Enterprise Architecture.
  • Responsible to publicize the Adecco IT Policy framework standards throughout all business and IT users of the Network and UCC organization to ensure all Technologies/Projects in scope are delivered in conformance to Group Standards.
  • Monitor and manage all security incidents, lead investigations on behalf of the IT Leaders and take remedial actions to prevent recurrence wherever possible.

  1. Main Stakeholders

 
  • Group Head of Network and UCC
  • Group Head of IT Security, Risk and Compliance
  • Security, Domain and Network Architects
  • Network and UCC Solution Engineers
  • Global and Operating Units’ Privacy Officers
  • Internal & External Audit
  • Legal
  •  

  1. Measured on

  • Achievement of Security, Risk and Compliance SLA Targets
  • Compliance with Security, Risk and Privacy Requirements
  • # and impact of security incidents affecting the Global Network and UCC Technologies/Organization
  • # of security vulnerabilities or non-conformities raised for Global Network and UCC Technologies/Organization


 
  1. Main tasks & responsibilities

 
  • Support the Global Head of IT Security, Risk and Compliance in the implementation of the Group Information Security Strategy in the Adecco Group Global Network and UCC Technologies/Organization

 
  • Supporting the Group Privacy Office by providing guidance and driving awareness in relation to the Data Privacy and Data Protection topics.
  • Communicate and publicize the Adecco Group IT Policy & Control framework and ensure risk assessments exercises are carried out timely and in line with the established procedures

 
  • Liaise with other Assurance functions (Internal and External Auditor), coordinate security audits and ensure that remediation plans are defined and implemented in line with agreed dates.
  • Assess current levels of risks within the Global Network and UCC Technologies on an on-going basis. Ensure all the Identified security risks are managed through their life-cycle and provide visibility to Management with clear and concise reporting

 
  • Ensure conformity of the Global Network to the defined Network Security Architecture and agreed Operating Model

 
  • Ensure that security is embedded in the projects lifecycle and that project teams deploy products /systems / applications in line with the IT Security Architecture Framework

 
  • Provide concise, relevant and informative reports to the Global Head of Information Security, Risk & Compliance and Global Head of Network and UCC on the status of security and risks indicators<<<

 
  • Monitor & manage all security incidents & breaches and take remedial actions to prevent recurrence wherever possible

 
  • Lead investigations in coordination with the GSOC (Global Security Operations Centre) in the respective functional area, on behalf of business and IT Leadership Team, for breach of Information Security Policies and standards or security compromise.

 
  • Be the recognized expert in the field of Information Security within the Global Network and UCC organization and keep abreast of local regulations and requirements related to information security, like Data Privacy Laws

 
  • Ensures Group Information Security Awareness Initiatives and end users training are deployed

 
  1. People, Resource management responsibilities & Decision Power

  • Line Manager of assigned resources
  • Define security and compliance guidelines
  • Define KPIs related to Risk management

 
  1. Minimum requirements & Personal attributes

Education and certifications/training:
  • University degree preferably in a technical subject or any comparable education
  • CISSP, CISA, CISM or similar certification preferred
  • Professional experience in running the information security office analysing and applying information security, risk management, and privacy practices

Professional & Leadership experience:
  • 5 years of experience in a similar position within a Global Organization
  • Professional experience in running the information security office analysing and applying information security, risk management, and privacy practices
  • Demonstrable knowledge in key IT Security and Risk Management framework (such as COBIT, NIST, SOC 2, ISO 27001)
  • Demonstrated experience and exposure in the international security arena dealing with security-related issues
  • Big 4 or HR industry background is desirable.
  • Strong telecom and network technology knowledge around Palo Alto, Cisco SD-WAN, ZScaler and PulseSecure is an asset
  • Strong knowledge around Microsoft Active Directory and endpoints related security offering, (i.e. Antivirus, Mobile Devices Management solutions, IAM, MFA, SSO, etc) is an asset

Personal attributes:
  • Strong team player
  • Ability to build pro-active, co-operative working relationships with customers, peers and key stakeholders based on respect and team work
  • Good ability to convince and influence stakeholders from all backgrounds.
  • Experience with and sensitivity for different cultures
  • Ability to act under strong pressure and to manage efficiently crisis situations
  • Good in leadership, inspiring, encouraging and providing constructive criticism to help improve performance of colleagues
  • Able to evaluate information, identify key issues and formulate conclusions based on sound, practical judgment, experience and common sense
  • Willingness and ability to travel

Language requirements:
  • Good to excellent command of English
  • Any additional language is a plus


Contact:
Jana Klodová
Permanent Placement Team Leader
Adecco Group
M:+420 602 325 274
E: jana.klodova@adecco.com
 
Přihlásit adecco/job.cancel

Referenční číslo AD a0W4I00000RNNk4UAH