Offer summary

Qualifications:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field., 3-5 years of experience in IT security, risk management, or compliance., Solid understanding of security frameworks (NIST, ISO 27001) and data protection regulations (GDPR, HIPAA)., Professional certifications such as CISSP, CISA, or CISM are advantageous..

Key responsibilities:

Develop and enforce IT security policies and compliance strategies.

Conduct assessments and audits of IT systems to identify vulnerabilities.

Monitor and respond to security incidents, documenting findings.

Collaborate with departments to promote awareness of security policies.

Job description

At BlackStone eIT, we are in search of a dedicated IT Security & Compliance professional to enhance our team's capability in maintaining a secure technological environment. In this role, you will ensure that our IT practices meet regulatory and security standards while proactively protecting our systems against cyber threats.

Key Responsibilities:

Develop and enforce IT security policies and compliance strategies that align with industry standards and regulatory requirements.
Conduct frequent assessments and audits of our IT systems to identify vulnerabilities and ensure compliance with applicable laws and regulations.
Monitor, investigate, and respond to security incidents promptly, documenting findings and resolution efforts.
Collaborate with various departments to promote awareness of security policies and compliance requirements.
Train and guide staff on best practices regarding information security and compliance issues.
Maintain up-to-date knowledge of evolving security technologies, threats, and compliance regulations.
Prepare and present detailed reports on security metrics and compliance status to senior management.
Assist in creating and refining incident response plans and compliance documentation.
Interface with auditors and regulatory bodies to facilitate external assessments.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
3-5 years of experience in IT security, risk management, or compliance.
Solid understanding of security frameworks (NIST, ISO 27001), data protection regulations (GDPR, HIPAA), and risk management practices.
Hands-on experience with security technologies and tools (firewalls, intrusion detection/prevention systems, SIEM).
Excellent analytical skills and attention to detail.
Strong written and verbal communication skills.
Professional certifications such as CISSP, CISA, or CISM are advantageous.
Ability to prioritize and manage multiple tasks in a fast-paced environment.
Team-oriented with strong interpersonal skills.
Willingness to stay current on emerging security threats and compliance challenges.

Benefits