Information Security Specialist – Regional

• Design and implement security solutions to protect IT infrastructure
• Develop and enforce security policies, standards, and risk mitigation strategies
• Conduct penetration testing, vulnerability scanning, and security audits
• Investigate and respond to security incidents, including forensic analysis
• Ensure compliance with GDPR, NIS2, and ISO 27001
• Evaluate and integrate new security tools and technologies
• Automate security processes and threat mitigation where possible
• Work with IT, Dev Ops, and risk management teams
• Engage with regulatory bodies and compliance auditors
• Coordinate with an external cybersecurity partner
• Safeguard IT systems and sensitive data within the Americas region

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related discipline and 4 years of IT experience focused on Information Security relevant technologies; or equivalent education, training, certification, and 8 years relevant experience
• Information Security certifications such as CISSP, CEH, CISM, or GIAC can be accepted in lieu of bachelor's degree
• Security+ preferred
• Knowledge of Information Security engineering principles, including least privilege and zero trust
• Knowledge of IAM solutions, including Active Directory, Okta, SSO, and MFA
• Knowledge of threat modeling and risk analysis techniques
• Knowledge of Information Security automation tools, including Ansible, Power Shell, and Python
• Knowledge of compliance frameworks, including NIST CSF, CIS Controls, and ISO 27001
• Skilled in designing and implementing security architectures
• Skilled in automating security processes and threat mitigation
• Skilled in managing security operations and improving response efficiency
• Ability to work independently and take ownership of security initiatives
• Strong problem-solving skills in high-pressure situations
• Excellent teamwork and collaboration in cross-functional security projects
• Clear and concise communication with technical and non-technical audiences
• Ability to travel domestically and internationally occasionally
• Ability to obtain and maintain a valid driver license and passport
• Must be legally authorized to work in the United States without current or future sponsorship

Demonstrates expertise in designing and implementing security solutions, conducting security audits, and ensuring compliance with regulatory frameworks such as GDPR and ISO 27001. Proficient in automating security processes and collaborating with cross-functional teams to enhance security operations.

• CISSP
• Penetration Testing
• Vulnerability Scanning
• Information Security Automation
• GDPR Compliance

• Security Architecture Design
• Risk Mitigation Strategies
• Threat Modeling
• Information Security Engineering Principles
• IAM Solutions
• Security Operations Management
• Forensic Analysis
• Security Policy Development
• Zero Trust Principles
• Security Incident Response

• Problem-Solving
• Teamwork
• Collaboration
• Clear Communication
• Ownership

• CISSP
• CEH
• CISM
• GIAC
• Security+

• Information Security
• Compliance Audits
• Cybersecurity
• IT Infrastructure
• Risk Management

• Ansible
• Power Shell
• Python
• Active Directory
• Okta
• SSO
• MFA
• NIST CSF
• CIS Controls
• ISO 27001