IT Security Engineer

Description IMPORTANT:
Please include job description here

• Threat Monitoring:
  Monitor network traffic for suspicious activity, detect and respond to potential threats, and provide recommendations for mitigation.
• Security Audits:
  Conduct internal audits of Achilles teams to ensure ISO 27001, SOC 2 Type 2 and ENS requirements are met.
• Firewall and VPN Management:
  Configure and manage firewalls, VPNs, and related network security devices to ensure optimal protection.
• Collaboration:
  
  Work with other IT teams to ensure security is embedded in infrastructure designs and processes.
• Patch Management:
  Ensure timely updates and patches to network devices to mitigate vulnerabilities.
• Documentation:
  Maintain detailed documentation of network configurations, security incidents, and changes made to systems.

• Compliance and Audits:
  Ensuring that the organisation complies with ISO 27001 requirements and other related standards. Preparing for internal and external audits.
• Incident Management:
  Handling security incidents and breaches, ensuring proper reporting and analysis. Ensuring that corrective actions from security incidents are implemented and that lessons learned are incorporated into future improvements.
• Vendor and Third-Party Management:
  Ensuring that third-party vendors and service providers comply with the organisation’s security policies and ISO 27001, SOC 2 Type 2 and ENS requirements.
• Continuous Improvement:
  Monitoring the effectiveness of the ISMS and implementing improvements as needed.
• Collaboration:
  
  Working closely with IT, legal, compliance, and other departments to ensure a unified approach to security. Collaborating on the integration of ISO 27001, SOC 2 Type 2 and ENS requirements into broader IT or business processes.

• Taking personal responsibility for skills development, particularly to enhance security capabilities.
• Actively participating in the performance management process and taking responsibility for delivering agreed objectives.

• Manage and develop relationships with third party providers and internal stakeholders
• Being a security ‘go to person’.

• IT Diploma level or equivalent experience.
• ISO 27001 Lead Auditor desirable.
• CISSP, CEH, CCNA Security, or other relevant security certifications are highly desirable.
• Fluent in English and Spanish, with the ability to communicate effectively in both written and spoken form.

• Identifies and evaluates the range of options open to them
• Articulates the assumptions made and the risks involved in decisions taken
• Analyses information carefully to identify facts, patterns, trends and missing data that may impact on a decision
• Communicates decisions clearly to those who are affected

• Focuses on performance outcomes despite uncertain or difficult circumstances
• Actively links own efforts to those of others within the team to avoid overlap, rework or delays
• Spots opportunities to deliver beyond expectations, where this would help others perform more effectively
• Sets own targets and objectives with clear reference to how these contribute to the departmental business plan

• Responds constructively and quickly to shifting goalposts or changing requirements
• Copes effectively with rapid change or increased demands
• Reprioritises own work or the work of the team in response to external pressures
• Is flexible in their approach; adapts their working style to suit the needs of the situation

• Addresses multiple demands without losing focus or energy
• Increases efforts in the face of difficulties or obstacles and recovers quickly after setbacks
• Remains calm and focused during stressful or challenging situations; concentrates only on things they can control or influence
• Encourages others during challenging times with their positive, can-do attitude

• Uses initiative to resolve recurring problems in own role or team
• Takes calculated risks to improve own performance
• Tries out new ways of working
• Allocates time to identifying and resolving the root causes of problems

• Understanding of ISO 27001…