IT Security Engineer III

hace 1 mes

Heredia, Costa Rica ThermoFisher Scientific A tiempo completo

Job Description

Position Summary:

As a member of the Corporate Infrastructure and Security - Risk & Assessments team, the Security Engineer is responsible for:

  • Providing key input and assistance in the development and implementation of a global cybersecurity risk management program

  • Maintaining and executing the risk management policy throughout the entire risk lifecycle

  • Executing various risk analysis processes within the team including intake and analysis of reported risks, risk management, and ensuring teams are properly managing plans to reduce or eliminate risk

  • Ensure consistency of security practice and standards across the organization

  • Conduct Information Security assessments including and documenting controls, identifying potential gaps and or inconsistencies and making sound recommendations for improvement and/or migration

  • Collaborate on the technical definitions and oversee implementation of security controls and requirements for systems, infrastructure and solutions

  • Provide consultative advice ensuring security design for systems aligns with business needs and the company’s security posture

  • Cultivate and maintain strong working relationships with IT teams, Legal, Privacy, and Internal Audit.

The ideal candidate will have good research, writing, and presenting skills, a desire to solve complex problems, and the drive to complete assignments on-time with minimal oversight.

This position will be part of a team that will be responsible for driving visibility and have understanding of information security risk management to contribute and influence strategic decision making across the enterprise.

Risk Key Responsibilities:

  • Intake and analysis of identified cyber security issues and risks from a variety of sources including security assessments, compliance checks, automated vulnerability systems, and other internally or externally reported risks.

  • Complete analyses and reports to develop a comprehensive view of risk across the company.

  • Assist and track for accurate risk measurement and response activities, provide necessary information and analysis to help business leaders prioritize risks

  • Review and track action plans developed by risk owners and ensure plans are completed appropriately

  • Perform ad-hoc risk analysis as assigned

  • Review and advise on internal security capabilities in the context of negotiations with customers or auditors.

  • Perform other duties as assigned.

Minimum Requirements/Qualifications:

  • 5+ years’ experience in risk analysis, information risk management, , data privacy, information technology, or equivalent with exposure to cybersecurity and/or information security risk.

  • Bachelor’s Degree in Risk Management, Information Assurance, Information Security, Cybersecurity, IT, Law or Data Privacy or equivalent work experience.

  • Experience with risk analysis.

  • Ability to explain complex risk management topics to a broad audience

  • Understanding of relevant industry frameworks such as ISO 27001 series, NIST 800-53, FISMA and others

  • General understanding of cybersecurity technologies and controls with the ability to bridge the gap between governance and technical concepts

  • Excellent writing skills, with experience as a writer or technical editor is considered a plus

  • Demonstrated ability to complete work with minimal direction and self-identify tasks

  • Excellent written and oral communication skills with experience presenting to senior leadership

  • Strong interpersonal, organizational, and excellent documentation skills

  • Excellent customer service skills

  • Relevant certifications such as CRISC, CISSP or CISA are considered a plus

  • Experience of various risk management frameworks such as the NIST Risk Management Framework or Center for Internet Security Risk Assessment Methodology will be considered plus.

Non-Negotiable Hiring Criteria:

  • Customer service mindset

  • Strong attention to detail, organizational skills, time management

  • Excellent verbal and written communication skills

  • The ability to interact professionally with a diverse group: executives, managers, and subject matter experts.

  • Ability to take direction and independently work through projects as required

Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.

  • IT Security Engineer III

    hace 3 semanas

    Heredia, Costa Rica Thermo Fisher Scientific A tiempo completo

    : Intake and analysis of identified cyber security issues and risks from a variety of sources including security assessments, compliance checks, automated vulnerability systems, and other internally or externally reported risks. Complete analyses and reports to develop a comprehensive view of risk across the company. Assist and track for accurate risk...

  • Security Engineer

    hace 3 semanas

    Heredia, Costa Rica Publicis Re:Sources Global A tiempo completo

    Job Description The Security Engineer for Re: Sources Global Security Organization (GSO), part of the overall Publicis Groupe, is responsible for orchestrating Publicis Groupe-wide security engineering operations and functions. The role must be able to translate the IT-risk requirements and constraints of the agencies into technical control...

  • Security Engineer

    hace 3 semanas

    Heredia, Costa Rica Publicis Re:Sources Global A tiempo completo

    Job DescriptionThe Security Engineer for Re: Sources Global Security Organization (GSO), part of the overall Publicis Groupe, is responsible for orchestrating Publicis Groupe-wide security engineering operations and functions. The role must be able to translate the IT-risk requirements and constraints of the agencies into technical control requirements and...

  • Application Security Engineer

    hace 4 semanas

    Heredia, Costa Rica Global Services Business A tiempo completo

    An important Company in Costa Rica is looking for an Application Security Engineer **Responsibilities**: Application security reviews (SAST, DAST, Pen testing) Secure architecture design Threat modeling Security outreach to internal development teams Security guidance documentation Security metrics delivery and improvements Build deep relationships with...

  • Application Security Engineer

    hace 4 semanas

    Heredia, Costa Rica GSB A tiempo completo

    An important Company in Costa Rica is looking for an Application Security Engineer English Advanced **Responsibilities**: - Application security reviews (SAST, DAST, Pen testing) - Secure architecture design - Threat modeling - Security outreach to internal development teams - Security guidance documentation - Security metrics delivery and improvements -...

  • IT Security Analyst

    hace 4 semanas

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**: Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific. **Know someone at Stryker?**: **Who we Want**: - ** Dedicated...

  • Senior Security Engineer

    hace 3 semanas

    Heredia, Costa Rica Publicis Re:Sources Global A tiempo completo

    Job Description Objective: To be responsible for orchestrating Publicis Groupe-wide security engineering operations and functions. The role must be able to translate the IT-risk requirements and constraints of the agencies into technical control requirements and specifications. Maintain and analyze web application firewall data and cloud security...

  • Systems Security Engineer Expert

    hace 4 días

    Heredia, Costa Rica Experian A tiempo completo

    Company Description **About us, but we’ll be brief** Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years...

  • IT Senior Analyst, Infrastructure and Security

    hace 6 días

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**: Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific. **Know someone at Stryker?**: **Who we Want**: - ** Dedicated...

  • IT Senior Analyst, Infrastructure and Security

    hace 4 semanas

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**: Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific. **Know someone at Stryker?**: **Who we want**: - ** Dedicated...

  • IT Analyst, Infrastructure and Security

    hace 7 días

    Heredia, Costa Rica Stryker A tiempo completo

    **Why join Stryker?**: Our total rewards package offering includes bonuses, healthcare, insurance benefits, retirement programs, wellness programs, as well as service and performance awards - not to mention various social and recreational activities, all of which are location specific. **Know someone at Stryker?**: **Who we Want**: - ** Dedicated...

  • Active Directory Engineer

    hace 6 días

    Heredia, Costa Rica SGF Global A tiempo completo

    **Active Directory Engineer (Hybrid)** **Heredia, Costa Rica** SGF Global is looking for a Active Directory Engineer, for IT enterprise in Heredia, Costa Rica. **Requirements**: - Bachelor’s degree in information technology, or a related field. Master’s degree preferred. - Active Directory Experience - Advanced understanding of, and experience...

  • Systems Engineer

    hace 4 semanas

    Heredia, Costa Rica Selligent Marketing Cloud A tiempo completo

    We’re seeking a highly skilled systems engineer who has the business knowledge and technical expertise to implement strategies, evaluate products, and build upon an infrastructure that supports the changing needs of our company. In this role, the systems engineer will design, develop and integrate complex work systems for every stage of a lifecycle. The...

  • System Engineer

    hace 5 días

    Heredia, Costa Rica Eurofins A tiempo completo

    Job Description We are looking for a Junior-Mid Systems Engineer to help us support, maintain, and troubleshoot our constantly evolving infrastructure. The team you will be part of is responsible for ensuring highest levels of availability, performance, and security for our business and internal stakeholders. Qualified systems engineers will have a...

  • Senior Application Security Engineer

    hace 4 días

    Heredia, Costa Rica Experian A tiempo completo

    Company Description **About us, but we’ll be brief** Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years...

  • Azure Active Directory Engineer

    hace 6 días

    Heredia, Costa Rica SGF Global A tiempo completo

    **Azure Active Directory Engineer (Hybrid)** **Heredia, Costa Rica** SGF Global is looking for a Azure Active Directory Engineer, for IT enterprise in Heredia, Costa Rica. **Requirements**: - Bachelor’s degree in information technology, or a related field. Master’s degree preferred. - Relevant experience in an Engineering role. - Experience working...

  • IT PAM Admin

    hace 3 semanas

    Heredia, Costa Rica Eurofins A tiempo completo

    Job Description In this role, you will be responsible for supporting the Privileged Access Management (PAM) services while adhering to Eurofins standards and best practices for the entire environment (On-Prem and Cloud). It is essential for you to be able to take up challenges, adapt to the business needs, and staying focused on delivering results, as...

  • Support Engineer

    hace 3 días

    Heredia, Costa Rica IBM A tiempo completo

    Introduction **At IBM, work is more than a job - it's a calling**: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's...

  • Senior Information Security Specialist

    hace 7 días

    Heredia, Costa Rica Experian A tiempo completo

    Company Description Experian is the world’s leading global information services company. During life’s big moments - from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers - we empower consumers and our clients to manage their data with confidence. We help individuals to take financial control...

  • Security Project Manager

    hace 7 días

    Heredia, Costa Rica IBM A tiempo completo

    **Introduction** At IBM, our Project Managers excel by leading and coordinating a project team’s overall performance, scope, cost, and deliverables. Our clients rely on timely and efficient status reports, and as Project Manager, you will drive the charge with project direction, metric definition, and performance management. If you are ready to help our...