Information Security Advisor

Your tasks

OVERVIEW

The Local Information Security Advisor (ISA) has the task to establish and drive Information Security (InfoSec) according to all relevant policies and guidelines on behalf of the InfoSec Officer (ISO) and the Regional InfoSec Manager (ISM).

By that the ISA has an essential role in the Information Security Management System (ISMS).

The Location Management commits itself to the InfoSec guidelines and targets and actively supports the InfoSec organization by appointing a ISA.

The ISA:

- Works in close cooperation with all relevant local departments as well as with the Regional Security Manager (ISM).
- Participates regularly in local management meetings.
- Participates annually in a regional InfoSec Workshop organized by the ISM.
- Supports all related local projects in order to ensure InfoSec conformity.
- In the event of substantial deficiencies or severe incidents endangering the security of company information, the ISA must inform and escalate accordingly to relevant policies.

Responsibilities on local level:
Support responsible management in the appointed location(s):

- Drive and monitor the implementation and usage of the existing ISMS (Information Security Management System) according to policies and guidelines as well as to business and customer requirements (e.g. ISO 27001, 8th European Directive, BSI).
- Conduct and ensure regular trainings, provision of information and advice of all employees, managers and third parties.
- Drive the appropriate classification of company proprietary information and adequate handling.
- Conduct or support risk management activities (i.e. risk assessments, business impact analysis).
- Monitor the development and maintenance of local emergency
- and contingency plans.
- Advise in all local aspects of identity
- and authorization management.
- Drive secure collaboration and integration of business partners.
- Drive, track, and report detection and remediation of vulnerabilities.
- Monitor and control the effectiveness of InfoSec projects and implemented measures.
- Drive usage of InfoSec processes and tools including documentation.
- Monitor execution of InfoSec reviews and conduct local inspections regularly.
- Execute actions and projects agreed on with the location management and ISM.
- Keep location informed about InfoSec regulations, warnings and news on current/new incidents.

**Profile**:

- Degree in computer science or information system or Cyber Security or other relevant degree with minimum 2 years' experience in related field.
- General knowledge about InfoSec related standards, processes and tools.
- Good knowledge of internal organization and local business and processes.
- Good knowledge of the local infrastructure
- Basic knowledge of InfoSec rules and related laws.
- Ability to motivate others and raise awareness for InfoSec related risks and threats.
- Ability to balance potential risks and costs of protective measures.
- Training user on new or improved business processes.
- Experience in IT and Cyber/Info Security will be added advantage.
- Interest in new technologies and willingness to learn.

**Offer**:
PREFERRED QUALIFICATIONS:
Beside professional experience, preferred in IT, the ISA should have:

- Training in relevant standards (at least ISO 27001 basics).
- Good knowledge of English language.
- Experience in a manufacturing environment will be a plus.
- Excellent communication and interpersonal skills.
- Able to work well with cross functional teams
- Strong problem-solving skills.
- Ability to adapt to changing priorities and handle multiple projects simultaneously.
- Knowledge with waterfall and/or Agile development methodologies.

Some travel and / or working off hours may be required (mínimal).

About us

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2021, Continental generated sales of €33.8 billion and currently employs more than 190,000 people in 58 countries and markets. On October 8, 2021, the company celebrated its 150th anniversary.

The Automotive group sector comprises technologies for passive safety, brake, chassis, motion and motion control systems. Innovative solutions for assisted and automated driving, display and operating technologies, as well as audio and camera solutions for the vehicle interior, are also part of the portfolio, as is intelligent information and communication technology for the mobility services of fleet operators and commercial vehicle manufacturers. Comprehensive activities relating to connectivity technologies, vehicle electronics and high-performance computers round off the range of products and services.

***

**Keyfacts**:

Job ID
**REF55147E**

Location
**Perai**

Leadership level
**Leading Self**

Job flexibility
**Hybrid Job**
- Legal Ent