Information Security Engineer

About the role

Bamboohr is seeking a dedicated Information Security Engineer to join our dynamic team in Ypsonas, Cyprus. This position is crucial for safeguarding our information systems and ensuring compliance with industry standards. The ideal candidate will play a pivotal role in identifying vulnerabilities, implementing security measures, and responding to security incidents. If you are passionate about information security and eager to contribute to a leading financial services provider, we would love to hear from you.

Key facts

What you'll do

• Conduct thorough assessments of our information systems to identify potential security vulnerabilities and risks.
• Develop and implement security policies, protocols, and procedures to enhance the overall security posture of the organization.
• Monitor network traffic and system logs for unusual activity, responding promptly to any security incidents or breaches.
• Collaborate with IT teams to ensure that security measures are integrated into all aspects of the technology infrastructure.
• Conduct regular security audits and assessments to ensure compliance with regulatory requirements and industry best practices.
• Provide training and awareness programs for employees to promote a culture of security within the organization.
• Stay updated on the latest security threats, trends, and technologies to proactively address potential risks.
• Work closely with external vendors and partners to evaluate and implement security solutions that align with our business objectives.
• Participate in incident response planning and execution, ensuring that all incidents are documented and analyzed for future prevention.
• Assist in the development of disaster recovery and business continuity plans to minimize downtime in the event of a security breach.
• Prepare detailed reports on security incidents, vulnerabilities, and compliance status for management review.
• Engage in continuous professional development to enhance your skills and knowledge in the field of information security.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in information security or a related discipline.
• Strong understanding of security frameworks such as ISO 27001, NIST, or CIS.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and antivirus software.
• Experience with risk assessment methodologies and vulnerability management.
• Familiarity with regulatory requirements such as GDPR, PCI-DSS, or similar standards.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.
• Ability to work independently and as part of a collaborative team in a fast-paced environment.

Nice to have

• Relevant certifications such as CISSP, CISM, or CEH.
• Experience with cloud security and securing cloud-based applications.
• Knowledge of programming languages such as Python, Java, or C++ for security automation tasks.
• Familiarity with penetration testing and ethical hacking methodologies.
• Previous experience in the financial services sector or a similar regulated environment.

Skills & tools

• Proficient in using security information and event management (SIEM) tools.
• Familiarity with network security protocols and technologies, including VPNs, IDS/IPS, and encryption standards.
• Knowledge of endpoint security solutions and mobile device management.
• Experience with incident response tools and methodologies.
• Understanding of data loss prevention (DLP) strategies and tools.

Practical notes

• This position is based in Ypsonas, Cyprus, and may require occasional travel for training or conferences.
• Candidates must be eligible to work in Cyprus; visa sponsorship is available for the right applicant.
• The role may involve on-call responsibilities to address urgent security incidents outside of regular business hours.
• We encourage applicants from diverse backgrounds and experiences to apply, as we believe a diverse team enhances our ability to innovate and serve our clients effectively.

If you are ready to take on the challenge of protecting our information assets and contributing to the success of Bamboohr, we invite you to apply for the Information Security Engineer position today!