Senior information Security Analyst Security Policy and Architecture

SUMMARY OF POSITION AND OBJECTIVES:

The Information Security Consultant/Architect plays a pivotal role in safeguarding the technological infrastructure and assets of Eurofins through meticulous evaluation, integration, and enhancement of security measures, evaluation of intricate IT technologies to ensure alignment with stringent security standards before their approval by the Technology Council, and contribution to the formulation and refinement of security policies, ensuring their relevance and effectiveness in the dynamic landscape of cybersecurity.

POSITION & OBJECTIVES

GSC Security Policy and Architecture Advisory is part of GSC Security Support Office pilar, combining the Security Policy and Architecture Advisory, Regional Security Support and Security Certifications Support crews.

As part of his significant role in safeguarding the IT infrastructure and assets, Information Security Consultant:

• evaluates complex IT technologies from security standpoint before they are approved by the Technology Council;
• contributes to newly created and updated security policies;
• provides consultancy to other IT and business crews regarding the policies and security recommendations;
• contributes to technical integration scenarios, ensuring security in ongoing and planned projects;
• engages into strategic initiatives aimed at enhancing Eurofins overall security posture, ensuring resilience against evolving threats and vulnerabilities (Information Security Architect);
• provides internal consultancies for other crew members (Information Security Architect);

QUALIFICATIONS AND EXPERIENCE REQUIRED:

Experience:

• 7-10+ years of experience in information security, preferably in the security architecture area;
• experience in one or more areas such as:
• managing complex IT environment utilizing directory services;

• designing/managing/protecting complex network environments;

• design and/or management of cloud-based services;

• identifying the requirements, architecting, deploying, and managing security tools

  , such as vulnerability management, identity management, PKI, log management, MFA, penetration tests, automate code analysis, antimalware solutions;
• acting as

  security SME (Key Word)

  in IT projects;
• delivering

  security policies, standards and guidelines.