You will join the IT Security team, whose responsibility it is to identify, control and report IT risks for the whole Group.
What can you expect from us
The main responsibilities are:
In cooperation with the Digital Risk Manager, oversee the planning, execution, and coordination of Information Security (cyber) Risk Assessments or projects related to compliance, control assurance, IT security, and infrastructure/information asset protection.
Recommends, manages, and coordinates required changes to IT risk & security policies and procedures. Assess needs against security concerns/exception and articulates issues and potential risks to management.
Work directly with Divisional management, third parties suppliers and other stakeholders to facilitate (cyber) security risk assessments and risk management processes and to identify acceptable levels of residual risk. Conduct an impact analysis to ensure that resources are protected adequately with proper digital security measures.
Review IT risk assessments, analyze the effectiveness of information security control activities, and report on them with actionable recommendations.
Evaluate security risks and define compliance strategies in accordance with the Atlas Copco IT Security policies and standards.
Develop recommendations for remediation strategies to mitigate risks associated with the protection of infrastructure and information assets.
Serve as a subject matter expert (SME) for performing risk assessments to improve overall risk program.
Educational and knowledge requirements:
CISSP, CISM, CRISC, etc. are an advantage
IT part: