Job Closed

This listing is no longer active.

Devsu logo
Devsu

Devsu is a technology agency that provides software development services, IT augmentation and staffing.

Líder de IT – Ciberseguridad

Security EngineerSecurity EngineerFull TimeRemoteSeniorTeam 51-200H1B No SponsorCompany SiteLinkedIn

Location

Colombia

Posted

16 days ago

Salary

0

Seniority

Senior

Bachelor Degree3 yrs expSpanishEnglishCloud

Job Description

Líder de IT – Ciberseguridad

Devsu

• Supervisar a nuestro Equipo de Soporte de TI (Actualmente 2 personas) • Diseñar, desarrollar, implementar, operar, mantener y monitorear los controles de seguridad de TI. • Realizar evaluaciones de riesgos, mantener un registro de riesgos, coordinar el desarrollo de políticas y estándares de seguridad de la información. • Supervisar la implementación y cumplimiento de estándares y marcos de seguridad de la información y privacidad de datos adoptados por la empresa, incluidos SOC2 e ISO 27001 • Velar por el cumplimiento de los compromisos contractuales y la normativa de seguridad y privacidad de datos. (GRPD, CCPA) • Supervisar los registros de seguridad y realizar evaluaciones de vulnerabilidad • Trabajar en colaboración con ingenieros IT y DevOps para implementar nuevas políticas y procedimientos en procesos de desarrollo de software. • Garantizar la protección y disponibilidad de los datos y sistemas.

Job Requirements

  • Licenciatura en Informática, Tecnologías de la Información o carreras afines.
  • Mínimo de 1 a 3 años de experiencia en roles de TI y Ciberseguridad.
  • Experiencia en gestión de riesgos, evaluación de vulnerabilidades y respuesta a incidentes.
  • Conocimiento de marcos y estándares de seguridad de la información (por ejemplo, SOC 2, ISO 27001, NIST).
  • Experiencia con seguridad en la nube, privacidad de datos y regulaciones de cumplimiento.
  • Fuerte comunicación y habilidades interpersonales.
  • Inglés intermedio (Mínimo B1)
  • Capacidad para trabajar bien en un entorno orientado al equipo.
  • Experiencia en administración de TI y Cloud es una ventaja.
  • Certificaciones relevantes como CISSP, CISM o equivalentes son una ventaja.

Benefits

  • Un contrato estable a largo plazo.
  • Entrenamiento contínuo.
  • Seguro de Salud Privado.
  • Clases de inglés, Bono de entrenamiento, capacitaciones y certificaciones.
  • Horario flexible.
  • Trabajar con algunos de los ingenieros de software más talentosos de América Latina y los EE. UU., haciendo un trabajo desafiante y software de clase mundial para clientes en los EE. UU. y en todo el mundo.

Related Categories

Related Job Pages

More Security Engineer Jobs

Full TimeRemoteTeam 201-500Since 2002H1B No Sponsor

• Support and maintain Audienceview’s PCI DSS compliance program, including scoping exercises, gap assessments, evidence collection, and coordination with QSAs during annual audits • Plan and execute penetration tests against internal and external systems, web applications, and APIs - documenting findings and working with engineering teams to drive remediation • Perform application security assessments and code reviews to identify vulnerabilities across Audienceview’s software portfolio • Evaluate and secure AI and LLM integrations • Incident response - Monitor, detect, and respond to security events and incidents • Be open to flexible working hours to support Incident response • Perform vulnerability assessments and risk analyses to manage security gaps • Design, implement, and maintain security controls, policies, and procedures aligned with Industry and regulatory frameworks • Conduct security reviews of system architectures, network configurations, and application deployments - ensuring PCI DSS requirements are addressed from design through production • Collaborate with Engineering teams to embed security and compliance requirements into the SDLC • Investigate and triage security alerts, perform root cause analysis, and document findings for both operational and compliance purposes

Chile
Full TimeRemoteTeam 201-500Since 2005H1B No Sponsor

• Designing and implementing endpoint security solutions in cloud and on premise data centers • Installation/Configuration, patching and tuning IDS/IPS signatures, create and amend policies • Monitor events and trends using Kibana • Provide support for internal and external customers in a large enterprise environment • Troubleshoot a range of IT security and connectivity issues • Support other team members in troubleshooting and project efforts • Manage hardware and software inventories • Works with remote teams to install, maintain and troubleshoot security hardware • Administer applications running on Linux and UNIX systems in virtualized and cloud environments • Participate in a rotating on-call schedule; every 6-8 weeks for a period of one week at a time

United States
$130K - $140K / year
Cincinnati Financial logo

IT - Third Party Risk Manager I

Cincinnati Financial

As a relationship-based organization, we welcome and value a diverse workforce. We provide equal employment opportunity to all qualified persons without regard to race, creed, color, sex, including sexual orientation, gender identity and transgender status, religion, national origin, age, disability, military service, veteran status, pregnancy, AIDS/HIV or genetic information, or any other basis prohibited by law.

Full TimeRemoteTeam 1,001-5,000

Role Description Our Vendor Management Office department is currently seeking a Third Party Risk Manager. Be ready to: - Conduct information security risk assessments of vendors and vendor software, based on company standards and risk appetite, leveraging demonstrated working knowledge of industry security practices. - Make information security risk recommendations on behalf of the company, within limits approved by management. - Review project documentation, system design documents, vendor security policies and other vendor security references (i.e. SOC II type 2, SIG, AUP, PCI ROC, TPRM monitoring reports, etc.) to determine the extent, type, and scope of risks of the vendor relationship. - Provide security-related recommendations and communicate the need for the changes to business, IT and other stakeholders. - Coordinate with IT architects, project teams and vendors to bring system designs into alignment with company security standards. - Follow procedures to establish company records for the risk management process. - Modify vendor risk procedures and other tools to support continuous improvement of the vendor risk management program. - Support IT management relative to vendor product ownership responsibility, product license needs, license and support renewal process. - Follow vendor governance policies and procedures that drive the behaviors of those individuals/organizations. - Inform IT and business unit stakeholders on vendor management practices. - Work with business partners and other IT service areas in the requirement gathering process. - Manage vendor relationships including negotiation, license/cost analysis, audit support and coordination, product renewals, and performance monitoring. Qualifications - Demonstrate an understanding of fundamental aspects of information security (i.e. data classification, inventories, technical/ procedural/ physical control categories). - Demonstrate an understanding of information security standards and regulations (e.g., ISO 27001/27002, NIST, FFIEC, etc.), and commonly used concepts, practices and procedures within the information security and privacy fields. - Demonstrate an understanding of the fundamentals of vendor relationship management (i.e. stakeholder management, communication, problem solving and organizational skills, relationship building). Requirements - A bachelor’s degree or technical institute training or any combination of education and experience that would provide an equivalent background. Benefits Your commitment to providing strong service, sharing best practices and creating solutions that impact lives is appreciated. To increase the well-being and satisfaction of our associates, we offer a variety of benefits and amenities. Learn more about our benefits and amenities packages. Many departments at our Headquarters in Fairfield, Ohio, offer hybrid work options, empowering associates to work from home several days a week. Depending on your role and responsibilities, hybrid options may be available. Company Description As a relationship-based organization, we welcome and value a diverse workforce. We grant equal employment opportunity to all qualified persons without regard to race; creed; color; sex, including sexual orientation; religion; national origin; age; disability; or any other basis prohibited by law.

United States
Rosie's People logo

Demand Generation Manager – Cybersecurity, AI

Rosie's People

Your one-stop partner for all your Leadership, HR & Business Operations challenges.

ContractRemoteTeam 1-10Since 2014H1B No Sponsor

• Designing and executing a demand generation roadmap across priority sectors (e.g. financial services, fintech, regulated industries) • Planning and running multi-channel campaigns (LinkedIn, email, webinars, reports, communities) • Building and managing lead-nurture journeys for complex buying committees (CISO, risk, compliance, IT, innovation) • Collaborating with leadership to define ICPs, personas, and core messaging • Creating and repurposing cornerstone content into campaign-ready assets that support the sales cycle • Setting up lightweight marketing operations, including tracking, basic lead scoring, and funnel reporting • Experimenting with targeted, account-based motions for high-value prospects and partner ecosystems • Testing, iterating, and sharing insights across marketing, sales, and product teams to refine GTM approach

New York