Mondelēz International

None

Remote

Ο τομέας της Πληροφορικής προσφέρει ποικίλες ευκαιρίες καριέρας στην ανάπτυξη λογισμικού, διαχείριση συστημάτων, ασφάλεια δικτύων και ανάλυση δεδομένων. Η αναπτυσσόμενη ελληνική αγορά πληροφορικής δημιουργεί προοπτικές για επαγγελματίες κάθε επιπέδου, ενισχύοντας την καινοτομία και τον ψηφιακό μετασχηματισμό. Η εργασία στον χώρο της πληροφορικής σημαίνει συμβολή στην τεχνολογική εξέλιξη με ανταγωνιστικές αμοιβές και ευέλικτες μορφές απασχόλησης.

The Information Technology sector offers diverse career paths in software engineering, system administration, network security, and data analytics. Greece's expanding IT industry provides promising opportunities for professionals at all levels, fostering innovation and digital transformation. Working in IT means contributing to technological progress with competitive salaries and flexible work arrangements.

LastWeek

LastThreeDays

Today

Aoristou

FullTime

OnSite

Hybrid

You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.What you will bringA desire to drive your future and accelerate your career. You will bring experience and knowledge in:<ul><li>Information security, compliance and risk management</li><li>Security solutions and their applicability to Mondelēz International</li><li>Security strategies, awareness campaigns, policies/standards and governance</li><li>Communicating effectively with technical specialists, leaders and peers</li><li>Analytical and problem-solving abilities</li><li>Being a team player by supporting and leading to achieve common goals</li></ul>

Senior Analyst - Security Operations Center, Operations Technology

We are looking for a Senior Cybersecurity Professional to join our team as a proficient contributor to an Enterprise Vulnerability Management Program. The successful candidate will showcase deep understanding of the technical aspects of Vulnerability Management as well as ability and experience in developing reporting metrics and KPIs, directly managing relationships with vendors and business teams, and leading compliance monitoring activities to ensure that vulnerability related risks to Mondelēz Information and Operational Technology assets are properly mitigated.&nbsp;How you will contribute:<ul><li>Oversee Vulnerability Management activities across Mondelēz.&nbsp;</li><li>Own processes to track all vulnerability remediation efforts and hold various teams across the organization and vendors accountable for timelines. Escalating issues and problems when and where needed.&nbsp;</li><li>Own processes to continuously monitor various sources of information (i.e., threat intelligence feeds) for vulnerabilities and assess their impact to Mondelēz’s environment.&nbsp;</li><li>Own processes that assess criticality of findings, create remediation plans with applicable teams and produce comprehensive reports for various levels of stakeholders (i.e., executive and technical).&nbsp;</li><li>Support Information Security and Business groups by performing asset inventory, secure configurations and continuous monitoring, tracking and reporting and vulnerability service catalog.&nbsp;</li><li>Support Vulnerability Management activities related specifically to IT and OT systems including Cloud and non-cloud assets and technologies.</li><li>Write and review policy documentation based on industry standards.&nbsp;</li><li>Support regular updates to secure coding standards documentation and the ongoing assessment of the customer organization against the NIST Cyber Security Framework.&nbsp;</li><li>Develop and maintain reporting and KPIs on vulnerabilities across the enterprise.&nbsp;</li><li>Develop and maintain Vulnerability Management Dashboards to be used by business, system, application and data owners across the enterprise.&nbsp;</li><li>Assist with vulnerability assessments of new applications and act as an advisory resource to their developers to help ensure the creation of secure code.&nbsp;</li></ul>Requirements:A desire to drive your future and accelerate your career. You will bring experience and knowledge in:<ul><li>Minimum 4 years in Information/Cyber Security field, with at least 2 years working in Vulnerability Management.&nbsp;</li><li>Experience with vulnerability scanning tools (e.g., Tenable, Wiz.io, etc) including set-up, configuration, architecture, reporting, scanning best practices.&nbsp;</li><li>Knowledge of security concepts and methodologies such as vulnerability assessments, application vulnerability testing, enterprise security strategies, network and cloud security.&nbsp;</li><li>Knowledge of security frameworks such as CIS and NIST.&nbsp;</li><li>Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.&nbsp;</li><li>Knowledge of creating reporting dashboards on Vulnerability Management reporting tools.</li></ul>

Senior Cybersecurity Professional, Vulnerability Management

You provide software and application knowledge to support implementation of the given solutions.How you will contributeYou will ensure that delivered services are optimized to meet business demands and the service operations strategy, plan, measure, report and communicate service improvement initiatives, and serve as a consultant on issues and resolutions. You will also recommend actions that can be taken to optimize investments and benefits and to mitigate risks. This role will require you to identify suppliers, evaluate them, on-board new vendors, establish and run vendor governance; collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments; work with project resources to provide design collateral and to configure software components so they are aligned with security policy and governance; and ensure adherence to development and configuration standards and processes.Main Responsibilities&nbsp;<ul><li>Sets out DevOps Platform strategy and roadmap in line with wider Business &amp; IT strategy to facilitate effective software deployment across the organisation</li><li>Leads the design and implementation of processes, practices and tools enabling CI/CD, maximising the speed and quality of software delivery and minimising unit costs across digital platforms</li><li>Manages build automation, release, deployment, and configuration activities of the DevOps platform, setting appropriate milestones &amp; KPIs and working within an Agile framework</li><li>Define CICD / Automation security requirements (e.g. least privilege principle).</li><li>Define security testing requirements (such as static/dynamic analysis security testing, vulnerability scanning, penetration testing, etc.).</li><li>Promote "security-left" (security coding convention, unit tests, static analysers), so that security should be built into the product, rather than applied to the finished product.</li><li>Manages tool and vendor selection across development automation activities to ensure that tooling is fit for purpose for an enterprise-grade software deployment automation &amp; DevOps platform</li><li>Owns, leads and drives systems engineering, software delivery automation and CI/CD practices across all digital platforms</li><li>Follows industry trends and developments to better meet wider business &amp; IT goals and ensure that the DevOps platform ecosystem is at the cutting edge of enterprise-grade software development automation systems</li><li>Bringing in the right “DevOps” mindset among the teams developing software, which would mean conducting training on tools and processes that makes software development and testing easier.</li><li>Drive increased maturity on the cloud DevOps capabilities including advanced CI/CD and metrics</li></ul>Qualifications:<ul><li>Bachelor’s degree in computer science, Business, a related discipline, or equivalent work experience</li><li>Good knowledge of DevOps CI/CD workflows, tools and integration points and experience integrating security into SDLC</li><li>Proven track record of architecting/implementing end to end pipelines that cover the entire SDLC.</li><li>Experience of having Implemented CI / CD tools such as GitHub, Bamboo, Jenkins, Connect All and JFrog including the build of pipelines.</li><li>Drive continuous improvement for supported applications, in areas such as monitoring, operational task automation, continuous integration, deployments and performance tuning.</li><li>Investigate and resolve complex and multi-faceted issues, spanning the entire technology stack, which requires working across teams and technology boundaries.</li><li>Proactively improve key metrics, such as up-time, application performance, and other key operational SLOs, SLAs.</li><li>Organized and prioritized work to complete assignments in a timely, efficient manner.</li></ul>

Mondelēz International

senior analyst - security operations center, operations technology