Back to listing

Security Governance Engineer
Romania (Brasov, Iasi, Cluj-Napoca, Bucharest, Craiova, Timișoara)

Date posted: 16.02.2024

Job type: Full time

Romania (Brasov, Iasi, Cluj-Napoca, Bucharest, Craiova, Timișoara)

Remote work

Full time

Job perks: Agile environment; Security projects; Professional team;

About the project

How we hire:
At Pentalog, excellence is what you'll do. We're guided by a mission to positively impact the software development world.

Our Internal Security Department is looking for a Security Governance colleague, who will oversee, manage and implement actions to maintain and increase the Group's security level and ensure compliance with requirements and frameworks.

Being part of the department, you will collaborate with people from various areas including operational Security, Governance Security and SOC team profiles. You will report to the group's CSO, under the Security Team Leader’s guidance, while developing the activity of this service and continuously increasing the security level of our company.
 

Job requirements

  • At least 5 years of experience in a similar role;
  • Good understanding of basic security technologies and secure development good practices;
  • In-depth knowledge of security standards such as ISO 27001 and GDPR;
  • Good knowledge on risk analysis methodologies (EBIOS or EBIOS RM) or any others;
  • Experience in project management and strategic planning for successful security initiatives; 
  • Ability to work independently and as part of a team, and to communicate effectively with other departments within the company;
  • Ability to proactively solve problems and anticipate potential security issues;
  • Ability to federate the members of the company to carry out its projects in a timely and effective manner;
  • Basic knowledges on different areas of computer security:
    • Vulnerability /Patch management;
    • Cloud security;
    • Security hardening;
    • Understanding of OWASP ASVS.
  • Strong communication and training skills to ensure security awareness and training of employees and developers;
  • Fluency in English.
     

Responsibilities

Manage/Leading the following activities: 

  • Develop, maintain and review security policies and procedures to protect the company's data and IT systems and to ensure they match with our requirements;
  • Conduct security risk analysis to identify potential vulnerabilities and threats, risks and recommend mitigation measures;
  • Work on ISO 27001 certification by implementing the necessary policies and procedures to comply with security standards;
  • Driving security controls to make sure the company is applying the security policies;
  • Report key indicators to the leadership;
  • Take part in the implementation of the necessary security controls, in accordance with the CSO directives;
  • Perform GDPR assessment and ensure compliance by supporting implementation of the recommendations.

Support on these activities: 

  • Provide security advice and technical assistance to other departments (Legal, DPO) within the company;
  • Perform security controls on SOX;
  • Implementation of a DLP solution compliant with the data retention and classification policy requirements;
  • Implementation of a Business Continuity Management (BIA, BCP …);
  • Ensure security by design on internal projects related to SecOps and SOC activities;
  • Help with reviewing security contracts, answering security questions of clients and building efficient processes and frameworks.
     

Benefits

  • Healthcare benefits (Private Medical Insurance, various extra medical advantages);
  • A more active lifestyle with the help of our PentaSport activities;
  • French and English classes;
  • Free pass to learning platforms;
  • Meal vouchers;
  • Mentorship programs that encourage and enable your professional development;
  • Access to a technology roadmap;
  • Full support to upgrade yourself (conferences and certifications);
  • New-born maternity grant;
  • A front-row seat to PentaBARs – our after-work tech events with a twist.
     

About Pentalog

As a leading European Software Services company operating internationally in France, Romania, Germany, Moldova, UK, Vietnam, Mexico, Morocco and USA, we employ over 1,300 engineers and IT experts who work in a very dynamic, multicultural working environment.

At Pentalog, your talents & ambitions are recognized and rewarded; we offer plenty of opportunities to develop, both individually, as well as a professional, and we reward our collaborators who understand the importance of self-improvement.

Super humans