IT Security Architect (4) București

IT Security Architect (4)
Bucureşti
București, București, Romania

Take a step forward and let Edenred surprise you.

Every day, we deliver innovative solutions to improve the life of millions of people, connecting employees, companies, and merchants all around the world.  

We know there are hundred ways for you to grow. With us, you will expand your skills in a multicultural, challenging, and dynamic environment.  

Dare to join Edenred and get ready to thrive in a global company that will offer you endless opportunities.

Edenred is all about meritocracy. You come as you are, and you contribute. Indeed, the Edenred Group recognizes, recruits and develops all talents and singularities.

We are committed to preventing all forms of discrimination and to providing all our candidates with equal opportunities regardless of their gender and gender expression, disability, origin, religious belief and sexual orientation or any other criteria.

The Edenred Digital Center (EDC) in Bucharest, Romania is Edenred Group's largest Digital hub for strategic tech projects.

CONTEXT/ ROLE

Edenred Group is currently building its Infrastructure & Cloud Security capabilities, as part of its Cybersecurity strategy.

As such, a Center of Expertise around Application, Infrastructure & Data security is in place, and is helping the entire Group with security standards, supporting projects, and providing adequate services to help all Business Units to increase their maturity level. This teams is split is three expertise tribes, working all together:

-Functional security, this tribe is able to understand business needs and turn them into security requirements, it also takes care of data security topics.

-Technical security, this tribe is able to provide strong technical expertise and build technical guidelines to implement the security requirements, including on security architecture, cloud security, infrastructure security, network security, cryptology or authentication.

-Security testing, this team is able to test the level of security and the good implementation of requirements, this includes notably penetration testing and remediation of vulnerabilities.

We are looking for a Security Architect , to be a member of the Application, Infrastructure & Data Security Team , in the Technical Security tribe.



Position SCOPE & KEY RESPONSIBILITIES

Reporting to the Head of Infrastructure & Cloud Security, the Security Architect will be a key point of contact to set technical guidelines and support projects in all of the 45 Countries of Edenred, working in a team of other security architects.

In the team, everyone can work on the topics that interest them, but each architect has a specialty topic on which they take the lead in the team. For this position, we are looking for someone showing strong understanding of network security, including for instance:

-Firewalling, network segmentation

-Security in network architecture

-DNS configuration

-Security of routing

-Web Application Firewall

The Security Architect will:

» Define and redact Group security standards, based on Edenred context and common frameworks (NIST…),

» Be the main point of contact of security questions related to network security, in particular be the
- to contact for security in projects led by Network teams.

» Grant security approval on actions and designs based on the risks.

» Support the security by design activity with his or her technical expertise, contribute to the definition of possible threat scenarios, and their probability, both in risk analysis and risk acceptances

» Provide support to the rest of the team on other areas, based on needs and interests:

o
Azure & AWS cloud security

o
Authentication, authorization & cryptological mechanisms

o
Security assessment and hardening practices of middlewares and libraries

o
Active Directory, Messaging, Sharepoint, End-user device security

» Performing technological watch to keep his/her knowledge up to date, or acquire skills in new technical areas.

» Maintaining close collaboration with Network and also Architecture teams, be involved in the security topics stemming from their activities.

» Contributing to the definition and conception of internal trainings regarding IT security

The main people the Security Architect will be in contact with are:

»Head of the Technical Security Tribe (manager) and Head of the Application, Infrastructure and Data Security team.

»CISOs for the different Countries and Business Lines, who are our main clients.

»Global Network team, following their topics and helping them of their
- related questions.

Required Skills

Experience

»Ideally, 5 to 7 years of experience in cybersecurity

»Additional experience in network or architecture positions would be appreciated

Knowledge and Skills

»Showing curiosity and being
- minded

»Will to learn more and improve continuously

»Strong knowledge of network security topics, including:

o
Security in network architecture

o
Firewalling, segmentation

o
DNS configuration

o
Web Application Firewall hardening

o
Anti-DDo
S and
- brute force

»Ability to develop and write clear guidelines and documentation, in collaboration with diverse actors of the company (Architecture teams, Infrastructure teams, other security people)

»Ability to understand a global context and design a general approach to solve a given problem.

»Ability to understand and take into account business needs.

»Strong skills in documentation and capability to articulate issues and tasks for
- IT staff

»Strong in communication and organization, be able to prioritize task and
- prioritize constantly.

»Fluent spoken and written English

»Any knowledge of other technical security topics such as cloud security, Active Directory security, End-user devices security, cryptology, authentication, and more will be greatly appreciated.

VIBE WITH US

Joining us means:

Because:

And we do not stop here!