Cyber Security Governance Expert Firenze

Cyber Security Governance Expert
Firenze
Toscana, Firenze

Cyber Security ExpertCompany: DevelerExperience:5+ years of experienceDeveler is looking for a Cyber Security Expert to join the company as a full-time figure dedicated to cyber security.

The person will have to deal with both the security of the company (internal systems) and the security of the products they develop. Responsibilities:Internal security:Implement and maintain security systems to protect the company's IT infrastructuresConduct periodic risk assessments and implement mitigation measuresDevelop and manage security awareness policies for employees, including training on security hygiene practicesConstantly monitor company networks to identify and respond promptly to any threatsManage and respond to security incidents, ensuring rapid resolution and damage minimizationProduct security:Collaborate with the software development team to integrate security best practices into the product lifecyclePerform security reviews of the code and architecture of software and industrial machinery (IoT / Embedded)Participate in the design and implementation of security features in company productsEnsure that the products developed comply with industry security standards and current regulationsExternal Vendor Management:Coordinate with external vendors for penetration testing and vulnerability assessment activitiesEvaluate the results of the analysis and manage the remediation of identified vulnerabilitiesMaintain relationships with consulting firms and security service providers to ensure ongoing and updated supportRequirements:Bachelor's degree in Computer Science, Computer Engineering, Information Security or a related fieldAt least 5 years of experience in the cybersecurity sector, preferably in corporate settingsVery good knowledge of IT security methodologies and tools, including firewalls, intrusion detection systems, and encryption solutionsExperience conducting security awareness training and managing security programs for employeesFamiliarity with software security practices, including code analysis and vulnerability managementFamiliarity with embedded or IoT security (interconnected industrial machinery)Ability to interact with different teams in parallel, establishing new processes in the company to improve product securityAbility to manage complex projects and work proactively and autonomously