Global IT Security Specialist

hace 2 semanas

Tocancipa, Colombia CANPACK A tiempo completo

Job overview:

We are seeking a Global IT Security Specialist who will play a crucial role in maintaining the security of the IT systems within our entire global organization. Your main responsibility will be to ensure that IT Security is continuously upheld throughout our environment.

In this role, your daily tasks will involve responding to security incidents, which may require collaboration with our Managed Security Service Provider (MSSP) team. You will also be responsible for analyzing and handling phishing emails, as well as working with various IT Security products, such as Data Loss Prevention (DLP), Privileged Access Management (PAM), Security Information and Event Management (SIEM), Vulnerability Management, and the Microsoft 365 cloud environment.

In addition, you will actively participate in analyzing requirements and implementing new security products to enhance our overall security posture. Your role will also involve contributing to the creation and updating of security-related policy documents that will have a global impact.

While this is an individual contributor role, you will work closely with other members of the Global IT Security team, as well as collaborate with business stakeholders and other IT teams, including Helpdesk, Infrastructure, and Automations.

Your expertise and efforts will play a critical part in safeguarding our organization's IT infrastructure and data, making this a rewarding and impactful position within our company.

Challenges & Opportunities

You’ll have opportunity to work in a Global IT Security Team. You will provide technical expertise in various areas of IT Security in GGH environment.

Expected skills:

  • Bachelors or master’s degree in computer sciences, information security or Information technology fields (or equivalent professional experience)

  • 3+ years of experience in IT Security

  • Hands-on experience in one or more of the following areas is mandatory: SSDLC & Identity and Access Management, Risk management & Internal Audit for IT, Cloud  (Microsoft) & Infrastructure Security

  • Additional experience in after mentioned areas will be a plus: DLP (Data Leak Prevention), Microsoft Information Protection (AIP), Microsoft or other CASB solution, Endpoint Security. Additional experience in following additional areas will be a plus: Vulnerability Management, OT (Operational Technology), Azure Security, MS365 Security, Defender ATP, Identity and Access Management.

  • Understanding basic technical concepts like networking, cloud computing, operating systems

  • Analytical and problem-solving skills

  • Ability to work in cross functional teams, including remote and external resources

  • Excel at prioritizing work and other demands for self and team including making risk-based decisions about remediation recommendations

  • Ability to effectively communicate with technical resources

  • Works with minimal guidance and recognitions when guidance needed

  • Ability to understand and develop enterprise policy and technical standards with specific regard to data loss protection and secure configuration

  • Ability and willingness to learn new things about data loss protection management, exploits, hacker techniques, and overall security operations

  • Strong English verbal and written communication skills

Nice to have

  • Knowledge of NIST, ISO 27001 controls

  • Information Security related certifications

We offer:

  • Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers

  • Great professional growth opportunities

  • Annual bonus

  • Flexible and hybrid work arrangement