Sidel is looking for an Information Security Analyst to work in our growing Information Security Office team in India. The candidate will be responsible for operating the vulnerability assessment procedure, managing the vulnerability governance dashboard, and supporting the vulnerability management core team involved in remediating vulnerabilities. This includes performing Windows Security Package non-regression tests for the human-machine interface (HMI) of Sidel equipment. The candidate will also support the security incident management team and security operations. Additionally, they will define and monitor technical security controls for the enterprise infrastructure, perform periodic security assessments, and assist in defining the related remediation plans
Job Purpose
Coordinate the
vulnerability assessment activities in all Sidel environments. Collaborate with
the infrastructure vulnerability management core team to guarantee timely
remediation of vulnerabilities. Coordinate the collection of information to
feed the vulnerability governance dashboard. Collaborate with the security
engineering team to ensure that Sidel machines are delivered with security
patches installed, hardening completed, and with vulnerability-free software
installed.
Description
Master
or Bachelor degree in relevant areas (technical, information security, IT
studies preferred);
3-7
years in information security related role, solid experience in
vulnerability management activities performed on medium /high complexity organization
Experience
in designing and operate a Vulnerability Governance Dashboard
Strong
team working aptitude
Experience
with penetration test and related tools is a plus
Experience
in Power BI developing
Experience
with security incident management, fraud investigation and trouble
ticketing tools
Experience
in hardening and vulnerability non regression est
Excellent
verbal, written and interpersonal communication skills with both technical
and non-technical audiences
Excellent
Fluent English, French and Italian are a plus
CCSP,
CISSP, CISA, CEH and similar certifications are a plus