Head of Security & IT, Orfium

• Experience in security management for a similarly sized company
• 5+ years of experience in IT engineering, with a strong focus on Best IT practices
• Strong understanding of networking protocols and security principles
• Bachelor's or Master's degree in Computer Science, Information Technology or a related field
• Experience in applying ISO 27001 & SOC 2
• Problem-solving, Autonomy, Flexibility, Seniority and Communication skills
• Ability to collaborate effectively with cross-functional teams
• Fluent English language communication skills (written & verbal)

Desirable

• We are seeking an experienced Head of Security & IT Manager to join our dynamic team and play a key role in the growth and maturing of our IT department
• As a Head of Security & IT Manager, you will be responsible for the creation and implementation of detailed security standards and the maintenance and management of the company's IT infrastructure, including hardware, software, and network systems
• You will also develop and implement an IT strategy that aligns with the organization's goals as well as provide support to various teams across the company
• 1. Manage and enforce security, GDPR and other compliances within the company
• Ensure secure architecture and procedures for our:
• A. IT systems
• B. Cloud systems/databases
• C. On-prem systems
• Define response protocols and implement them as required
• Work with our Legal Dept to ensure we are meeting our contractual requirements, both for security, but also for notification.
• Propagate and ensure secure design practices
• 2. Ensuring System Security: You will be responsible for ensuring the security of the prganization's IT systems, including implementing firewalls, anti-virus software, and other security measures (system documentation and procedures)
• 3. Overseeing IT Infrastructure:
• Additionally, you will
• As part of your responsibilities, you will be in charge of overseeing the IT infrastructure, which comprises hardware, software, and network systems
• Oversee user accounts, subscriptions, permissions, domains, emails, mailing lists, and groups, as well as employee onboarding - offboarding, procure required equipment for personnel and office, set up company equipment
• Triage and evaluate software updates for all OS used in the company before they are rolled out in every employee workstation
• Manage and monitor the organization’s networks (WANs, LANs) to ensure they are secure and functioning properly
• 4. Specifying and Enforcing IT Policies:
• You will be responsible for specifying and monitoring IT policies that align with the organization's goals and objectives
• This includes handling compliance and certification, ensuring compliance with industry standards and regulations, setting up and maintaining Workforce SSO, developing and enforcing IT policies and procedures to ensure the security and reliability of the organization's systems and data
• You will have to ensure ISO 27001 & SOC 2 compliance and develop check routines on the basis of ISO27001 for IT operations
• 5. Providing Technical Support:
• You will provide technical support to employees, troubleshooting issues and providing solutions as needed
• 6. Managing IT Projects:
• You will be responsible for overseeing IT projects, ensuring that they are executed within the designated timeline, within budget, and according to specifications
• 7. Managing IT Staff:
• You will manage and lead the IT team, assigning tasks, setting performance goals, and providing guidance, training and support
• 8. Managing IT Budget:
• You will be responsible for managing the IT budget, ensuring that resources are allocated effectively and efficiently
• 9. Managing Vendor Relationships: The Senior IT Officer will manage relationships with third-party vendors and service providers, ensuring that service level agreements are met and that vendors provide high-quality services at reasonable prices
• You will also ensure 3rd party coverage for post-incident response
• 10. Run regular:
• A. Security audits
• B. Penetration testing
• C. Training and Education