Technical Information Security Officer (ISO)
Eye Security
Technical Information Security Officer (ISO)
Eye Security is seeking a Technical Information Security Officer (ISO) to lead the design and implementation of IT security architecture, monitoring infrastructure, and technical controls. The role involves translating compliance requirements into technical solutions, managing log analytics and SIEM platforms, and ensuring security controls are operational. The ideal candidate has hands-on experience with AWS, DLP, SIEM, and ISO 27001:2022 and EU NIS2 compliance.
Technical Information Security Officer (ISO)
Eye Security is seeking a Technical Information Security Officer (ISO) to lead the design and implementation of IT security architecture, monitoring infrastructure, and technical controls. The role involves translating compliance requirements into technical solutions, managing log analytics and SIEM platforms, and ensuring security controls are operational. The ideal candidate has hands-on experience with AWS, DLP, SIEM, and ISO 27001:2022 and EU NIS2 compliance.
Salary
Core Qualifications
Technical (Must-have)
Soft Skills
Preferred Qualifications
Technical (Nice-to-have)
Key Responsibilities
- Design and implement insider threat solutions, such as Data Loss Prevention (DLP)
- Define and enforce role-based access controls and separation of duties principles
- Establish and maintain secure configurations for systems, applications, and network components
- Develop threat models and security design documentation
- Deploy and configure centralized logging infrastructure and SIEM platforms
- Design and implement alerting rules and monitoring workflows
- Monitor, investigate, and respond to security alerts
- Optimize log retention, storage, and analytics performance
- Coordinate vulnerability disclosure processes and manage the bug bounty program
- Coordinate and oversee penetration testing engagements
- Develop and maintain a process for tracking, prioritizing, and remediating vulnerabilities
- Establish and enforce secure coding principles and practices
- Implement configuration management processes
- Design and implement secure data masking techniques
- Work closely with Information Security Officers to translate compliance requirements into technical specifications
- Provide evidence and documentation of technical controls for compliance audits
- Support ISO's in defining technical monitoring requirements
- Develop and support cyber security incident exercises and participate in the Incident Response Team