About the job

With 40 years of experience in the international market and 16 years in Romania, HN Services means:

• Digital transformation and IT professionals
• Diversity of technical roles
• Wide IT market exposure in different domains of activity
• A dedicated internal Training Center in software development

YOUR DAY-TO-DAY RESPONSIBILITIES:

• Analyze and classify the preliminary risk profile for applications and systems and highlight the information security risk factors based on company policies
• Assess partners level of Security maturity, document the information about them and create a risk analysis for ongoing projects
• Follow the Action Plans agreed with partners and periodical deliveries from them
• Perform information security control reviews
• Identify and analyze risks to determine the adequacy of existing security controls
• Investigate and document security breaches and other cybersecurity incidents;
• Complete and present to security management and business sponsors a risk assessment evaluation articulating risk and impact analysis when security controls cannot be met by an initiative to ensure transparency and appropriate level of acceptance.
• Maintain Information Security policies, standards, procedures, technical security baselines as applicable
• Regularly contribute to monthly reporting of information security risk treatment, mitigation, and risk metrics.

RESPONSABILITIES:

• Analyze and classify the preliminary risk profile for applications and systems and highlight the information security risk factors based on company policies
• Assess partners level of Security maturity, document the information about them and create a risk analysis for ongoing projects
• Follow the Action Plans agreed with partners and periodical deliveries from them
• Perform information security control reviews
• Identify and analyze risks to determine the adequacy of existing security controls
• Investigate and document security breaches and other cybersecurity incidents;
• complete and present to security management and business sponsors a risk assessment evaluation articulating risk and impact analysis when security controls cannot be met by an initiative to ensure transparency and appropriate level of acceptance.
• Maintain Information Security policies, standards, procedures, technical security baselines as applicable
• Regularly contribute to monthly reporting of information security risk treatment, mitigation, and risk metrics.

QUALIFICATIONS:

• Practical working experience (1+ years) is required in the following areas:
• Information systems security;
• Risk analysis for software applications;
• Document business processes from security perspective
• Multi-layer IT Architectures;
• Good understanding of IT Architecture documentation (systems, servers, network, data exchanges)
• Intermediate knowledge about perform system and network security audits;
• General knowledge of Linux and Windows Operating Systems with the focus of security