Application and Cloud Security Manager
Budapest
Permanent 3-5 years of professional experience Hybrid
Our client is looking for an Application and Cloud Security Manager in its European IT TeamIt is a regional role working with IT and business teams across European markets.
You will be responsible for IT security requirements (policies, standards, baselines), application security (SDLC, „shift-left security and cloud security.
Provides advisory service for the global community to ensure that across the businesses IT risks and controls are managed in a consistent way.
You will be also responsible for Application Security strategic planning, delivery and reporting.
Main responsibilities:
- Define and update IT security requirements (policies, standards, baselines),
- Provide security support for business projects – in particular define security requirements, support secure design of solutions, provide security advisory and organise security testing in cooperation with Security Testing SME,
- Define and support implementation of application security strategy taking into account cloud operating model, shift-left security and SDLC,
- Support delivery and operations of DevSecOps security testing tooling used by delivery teams,
- Develop cloud security governance and controls,
- Support delivery teams and architects community with security advisory,
- Colaborate with other Security team members and contribute development of overall cyber security governance and controls,
- Monitor Cyber Security industry, identify new emerging threats,
- Work collaboratively with the IT teams in all countries.
Requirements:
- Minimum 3 years of Information Technology and 1 year of Security experience,
- Foundational knowledge of all security domains and controls (ISO 27001/2),
- Understanding and working experience of cloud security, application security, secure architecture, DevSecOps tooling,
- Master’s or Bachelor’s degree (Information Technology),
- Excellent English verbal and written communication skills,
- Excellent communication and interpersonal skills,
- Problem solving approach,
- Great work organizational skills.
Nice-to-have:
- Security skills proven with one of industry recognised certifications: CISSP, CISM, CISA, CompTIA, Security+, GSEC;
- Cloud computing knowledge proven with CCSK, CCSP and/or CSP specific (in particular AWS) certifications,
- Hands on experience with cloud computing security tooling,
- Experience with DevSecOps security testing toolig (SAST, DAST, SCA, etc),
- Experience from financial field.
What our client offers:
- Professional development opportunities,
- Performance-based annual bonus,
- Cafeteria, health insurance,
- Car compensation, laptop, mobile,
- Home office 3 times a week,
- Exciting Security projects in our unique space in the evolving financial industry,
- You will be surrounded by a professional team.
