Home information security
 

Keywords :   


Tag: information security

Information Security Consultant Cyber Internal Auditing

2019-05-23 11:30:50| Space-careers.com Jobs RSS

Position Reference 042 For our international client, we are looking for an experienced information security professional with expertise in Cyber Internal Auditing. Tasks and Activities The scope of work will include Audit processes and controls related to vulnerability management Audit implementation of operational mitigations and operational treatment plans in general Audit implementation of processes and controls related to cyber security governance Support the development of the cyber audit plan Report to Cyber Internal Auditing manager Provide support to the Cyber Internal Auditing manager on any other tasks under its responsibility. Skills and Experience The following skills and experience are mandatory You have significant demonstrable experience in a Cyber Security related environment You have at least 4 years of experience in auditing and reviewing design and implementation documentation of secure systems, with focus on implementation of security in the design and security controls e.g. patch management, hardening guidelines etc in operational ICT systems You have experience in cyber security risk management You have experience in working within complex project environments involving several stakeholders. Project experience in space programmes will be an asset You have a high level of proficiency in the English language at least C1 level. Knowledge in other European languages will be an asset These activities are related to a programme funded by the European Commission. Therefore, only candidates with EU nationality will be considered for this role. How to Apply Looking to take your career to the next level? Interested applicants should submit their CV and Cover Letter to RHEAs Recruitment team at careersrheagroup.com no later than 26062019. About RHEA Group RHEA Group is a leading engineering consultancy firm with demonstrated expertise in space, system and secure software solutions. We attract skilled engineers, scientists and management professionals and offer a range of exciting career paths working alongside clients such as the European Space Agency, the European GNSS Agency, EUMETSAT and NATO.

Tags: information security internal consultant

 

Information Security Consultant

2019-03-27 11:30:06| Space-careers.com Jobs RSS

Position Reference 131 For one of the most famous and exiting European space projects, you will have the opportunity to support the client in defining and maintaining technical specifications for cyber security and related processes. Tasks and Activities The scope of work will include Write cyber security policies suitable to the Galileo environment. Review cyber security policies in place. Suggest improvements to the current cyber security policies. Write policies and security requirements in English, suitable to the Galileo environment. Manage cyber security requirements in the identified requirements management systems i.e. DOORS. Maintain traceability between Mission, SystemService requirements in DOORS. Maintain traceability between SystemService and other sets of identified requirements. Perform a gap analysis for GSA cyber security requirements, across existing GSA contracts and procurements e.g. GSC, GSOp, RLSP, GRON. Maintain applicability matrix for GSA cyber security requirements, across contracts and procurements. Support the optimization i.e. removing any duplications of the requirements between existing security requirements e.g. EE SREQ and new cybersecurity requirements. Perform a study on the use of MODAF for the definition of the network map. Write cyber operational scenarios suitable to Galileo Security operations. Review cyber operational scenarios in place. Suggest improvements to the current cyber operational scenarios. Support the flow down of GSA cyber security requirements in the relevant contracts and procurements e.g. GSOP, GSC, RLSP, Sites. Support the flow down of GSA cyber security requirements in coming activities e.g. HA. Take part to system development lifecycle milestones e.g. PDR, CDR, AR of Service Facilities and other GSA procurements within the SAB accreditation perimeter e.g. GRON. Skills and Experience The following skills and experience are mandatory You have a University Degree in Cybersecurity, Computer Science, Engineering or Management Information Systems. You have at least 3 years of professional experience in conformance testing activities related to cyber security. You have a deep understanding of compliance requirements, standards, and guidelines e.g. ISO, NIST, SANS, COBIT, ITIL, CC. You have experience with the standard MS Office Suite, Visio, Project, SharePoint and IBM DOORS. You possess excellent oral and written communication skills in English i.e. Cl level of CERFL. You are eligible for a Personal Security Clearance at SECRET UEEU SECRET level, before the moment of entering into service. Not mandatory but strong assets are You have a first experience in a Space project and ideally in Navigation, You have experience in ISO27001, You have CISM or CISP certification, and knowledge of NIST, You have experience in requirements elicitation You have experience with enterprise architecture MODAF or TOGAF. How to Apply Looking to take your career to the next level? Interested applicants should submit their CV and Cover Letter to RHEAs Recruitment team at careersrheagroup.com no later than 25042019. About RHEA Group RHEA Group is a leading engineering consultancy firm with demonstrated expertise in space, system and secure software solutions. We attract skilled engineers, scientists and management professionals and offer a range of exciting career paths working alongside clients such as the European Space Agency, the European GNSS Agency, EUMETSAT and NATO.

Tags: information security consultant information security

 
 

Quality Assurance Information Security Assistant

2019-01-22 15:30:30| Space-careers.com Jobs RSS

Position Reference 007 You will have the opportunity to contribute to the creation, implementation and certification of an Integrated Management System IMS document base including requirements from the ISO9001 Quality Management System QMS and ISO27001 Information Security Management System ISMS standards. Tasks and Activities The scope of work will include Writing, reviewing, updating, harmonizing and suggesting improvements to the existing and missing policies and procedures necessary to the completion of the ISO27001 ISMS implementation as an Integrated Management System IMS in coherence with the existing ISO9001 QMS document base. Support the trainings preparation and delivery to all the RHEA Groups employees. Support the realisation of other mandatory activities to complete the certification process such as risk assessment, internal audits and actions followup. Skills and Experience The following skills and experience are mandatory You have a Bachelor degree in the relevant discipline. With desired experience on at least three of the items mentioned below ISO9001 QMS ISO27001 ISMS certified working environments or similar. Writing and reviewing policies and procedures in accordance to different standards and regulatory frameworks. Internal audits. Risk assessment. Trainings preparation and delivery. Stakeholders interests collection, understanding and consensus obtention. How to Apply Looking to take your career to the next level? Interested applicants should submit their CV and Cover Letter to RHEAs Recruitment team at careersrheagroup.com no later than 06022019. Preference will be given to candidates eligible for an EU or national personal security clearance at the level of CONFIDENTIAL or above. About RHEA Group RHEA Group is a leading engineering consultancy firm with demonstrated expertise in space, system and secure software solutions. We attract skilled engineers, scientists and management professionals and offer a range of exciting career paths working alongside clients such as the European Space Agency, the European GNSS Agency, EUMETSAT and NATO.

Tags: information quality security assistant

 

Information Security Engineer

2019-01-11 15:32:58| Space-careers.com Jobs RSS

Position Reference 001 As an Information Security Engineer, you will join a team of Information Security professionals in support of RHEA Group clients by providing Information Security services in various market sectors including space, critical infrastructure protection and defence. Duties will include delivery of security advice and guidance, security engineering services, reports and other deliverables to meet client needs. Tasks and Activities The scope of work will include Best practice advice and guidance in the areas of security programs, governance, doctrine, policies, standards, methodologies, procedures, and checklists ISO 27000 series compliance evaluation, certification, audit and accreditation Information security system requirements analysis, design, development and test Information security training and awareness Information security program and project management. Skills and Experience The following skills and experience are mandatory You have a postsecondary degree or diploma in a relevant field. Example relevant fields include electrical or computer engineering, computer science, information technology, information management, or similar. Technical certifications, diplomas or qualifications in information technology or information management, policing and security or related fields may also be accepted. You have excellent oral and written communications capability in English You have experience in requirements analysis, design and implementation of information security solutions including for example Firewall and VPN solutions Intrusion detection and penetration systems network or host based Identity management and access control systems Encryption and key management technologies Malware detection and antivirus systems Data leakage protection systems Security information and event management systems Vulnerability analysis and patch management solutions Penetration testing technologies and approaches TCPIP based routerswitch networking equipment and solutions. You have demonstrated experience in developing secure hardening guidance and implementation guides for information systems including for example LinuxUnix based host platforms Windows based host platforms RouterSwitch based networking equipment and solutions Identity management and access controls solutions. You have a professional qualification or certification in a relevant field. Example certifications include Certified Information System Security Professional CISSP certificate, Certified Protection Professional CPP, Certified ISO 27001 Auditor or similar is considered an asset. You have experience writing security policy and procedures. You must be a citizen of the EU or a NATO member nation The following skills would be highly desirable You have experience in information security services for space, critical infrastructure protection and defense market segments. You have a qualification for EUNATO SECRET clearance. How to Apply Looking to take your career to the next level? Interested applicants should submit their CV and Cover Letter to RHEAs Recruitment team at careersrheagroup.com no later than 20012019. About RHEA Group RHEA Group is a leading engineering consultancy firm with demonstrated expertise in space, system and secure software solutions. We attract skilled engineers, scientists and management professionals and offer a range of exciting career paths working alongside clients such as the European Space Agency, the European GNSS Agency, EUMETSAT and NATO.

Tags: information security engineer information security

 

Information Security Risk Analyst

2019-01-04 11:30:32| Space-careers.com Jobs RSS

Position Reference 001 As an Information Security Risk Analyst, you will join a team of Information Security professionals in support of RHEA clients by providing Information Security services in various market sectors including space, critical infrastructure protection and defence. Duties will include delivery of security advice and guidance, risk analysis and management services, reports and other deliverables to meet client needs. Tasks and Activities The scope of work will include Best practice advice and guidance in the areas of security programs, governance, doctrine, policies, standards, methodologies, procedures, and checklists ISO 27000 series compliance evaluation, certification, audit and accreditation Information security risk analysis including asset valuation, threat and vulnerability assessments, safeguards analysis, risk assessment and development of risk treatment plans Information security business and privacy impact assessments Business continuity, contingency and disaster planning testing Information security training and awareness Information security program and project management. Skills and Experience The following skills and experience are mandatory You have a post secondary degree or diploma in a relevant field. Example relevant fields include mathematics, computer science, information technology, information management, business management, risk management or similar. Technical certifications, diplomas or qualifications in information technology or information management, policing and security or related fields may also be accepted. You have excellent oral and written communications capability in English You have experience in evaluation and management of security risks associated to information systems and information security solutions including for example Experience conducting ISO 27000 series evaluations or audits Firewall and VPN solutions Intrusion detection and penetration systems network or host based Identity management and access control systems Encryption and key management technologies Malware detection and antivirus systems Security information and event management systems Vulnerability analysis and patch management solutions TCPIP based routerswitch networking equipment and solutions. You have knowledge or experience in the following areas Information Security concepts involving Confidentiality, Integrity and Availability Security Accreditation and Authorization or Security Certification and Accreditation Statements of Sensitivity or Asset Valuation associated with a risk assessment Threat and Risk Assessments, Vulnerability Assessments, and Safeguard Assessments Privacy Impact Assessments Business Impact Assessments, Business Continuity or Disaster Recovery Plans Information Security policies, standards, and procedures Network and Physical Security zoning requirements You must be a citizen of the EU or a NATO member nation You have a professional qualification or certification in a relevant field. Example certifications include Certified Information System Security Professional CISSP certificate, Certified Protection Professional CPP, Certified ISO 27001 Auditor or similar is considered an asset The following skills would be highly desirable You have experience in information security services for space, critical infrastructure protection and defense market segments. You have a qualification for EUNATO SECRET clearance. How to Apply Looking to take your career to the next level? Interested applicants should submit their CV and Cover Letter to RHEAs Recruitment team at careersrheagroup.com no later than 20012019. About RHEA Group RHEA Group is a leading engineering consultancy firm with demonstrated expertise in space, system and secure software solutions. We attract skilled engineers, scientists and management professionals and offer a range of exciting career paths working alongside clients such as the European Space Agency, the European GNSS Agency, EUMETSAT and NATO.

Tags: information security risk analyst

 

Sites : [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] next »