Senior Information Security Analyst, PPRO

• Proven experience in security management, risk assessment, and compliance, with at least 3 years of experience in a security role
• Good knowledge of regulatory frameworks (CSSF/EBA, DORA, FCA, GDPR)
• Excellent written and spoken English skills
• Commitment to diversity and inclusion and the ability to foster an inclusive culture
• Curiosity, a growth mindset and a commitment to continuous learning and innovation
• Strong communication and interpersonal skills, able to communicate across a broad range of stakeholders (technical and executive) and influence outcomes

Desirable

• You’ll join a growing GRC team responsible for keeping the company secure and compliant. As an Information Security Officer, you will play a critical role in ensuring the security of PPRO and our customers, safeguarding our organisation's information assets and ensuring compliance with industry standards and regulations
• Ensuring the identification and management of security risks by participating in comprehensive risk assessments
• Contribute to the creation and implementation of pragmatic, effective and efficient security policies, in alignment with business goals and industry best practices
• Perform oversight to ensure we remain compliant with applicable laws, regulations and standards
• Foster a culture of security awareness across the organisation, providing training to employees on security best practices, highlighting relevant risks and driving ownership and accountability for business areas’ security activities
• Participate in the implementation of a robust second line of defence to ensure effective oversight of first line teams
• Collaborate with technology teams to ensure security is embedded in system designs and implementations
• Support PPRO’s incident response and resilience plans with Engineering and Compliance teams
• Participate in both internal and external audits
• Interact with suppliers and customers to build PPRO’s reputation as a best-in-class secure services provider
• Foster a culture of ongoing security enhancement