Cyber Security Risk Assessor : Red Team # 123810

Job description

Cyber Security Risk Assessor (ENO role)

CISO team at Credit Suisse is tasked to ensure the data and IT systems of the bank are appropriately protected, while enabling technology advancements in line with business strategies. CISO Services play a key role in fulfilling this mandate by providing IT risk advisory and technology risk assessment services of projects, applications and IT infrastructure to internal clients globally, helping them understand IT risk exposure in their area.

Role Description

The Cyber Security Risk Assessment team within CISO provide independent oversight of the Red Team activities and govern and handle the output of the Bank's Threat Intelligence Red Teaming function. Their role is to ensure that Red Team tests provide the greatest possible risk benefit to Credit Suisse, the tests being conducted consider threats that the bank is expose to, and the findings are appropriately analyzed and addressed.

We are looking for extraordinary you that want to grow a successful career in Information Security and want to be part of an ambitious, highly focused team.

As Cyber Security Risk Assessor you will:

· Work on the international team of information security guides within the Credit Suisse CISO organization.
· You will involve in bank's global Cyber Security Red Team Program to ensure it is properly execute and findings are translate into business risks.
· You will ensure that Red Team processes are follow precisely, to the expected quality.
· Act as an information security advisor to the IT asset owners at Credit Suisse.
· Provide support to IT and business partners in understanding business impact of identified IT risks and defining adequate mitigation actions.

Open to discussing flexible/agile working.

Desired profile

Qualifications :

You will poses the following qualities:

·  You have good interpersonal skills.
·  You have proficiency in English (spoken and written), German is a plus.
·  You have strong IT background (IT degree holder preferred).
·  You have deep knowledge of industry standards (e.g. ISO 27001, COBIT, ITIL).
·  Do you have good working knowledge of IT security and risk management disciplines (understanding risks, threats, vulnerabilities, security controls etc.)?
·  Good working knowledge of Operating Systems (at least Windows Server and Unix-like OS'es) security and typical IT security controls (access management, log & monitoring, encryption etc.).
·  Deep understanding of application & system development lifecycle management.
·  You have deep understanding of infrastructure components, including infrastructure security components (e.g. NAS, backup solutions, firewalls, IDS, IPS etc.).
·  Deep understanding of IT security architecture standard methodologies.
·  Red Team and/or penetration testing experience is a plus.
·  CISSP, CISA, CISM, CompTIA Security+ or equivalent certification is a plus.
·  Experience in financial services industry is an advantage.

For more information visit Technology Careers .

Our benefits

·  Private medical care
·  Life insurance
·  Pension plan
·  Charity days
·  Training and development
·  Internal Mobility

Other optional

·  Language training course
·  Mentoring
·  Family – nursery and kindergarten funding, gift vouchers for Christmas
·  Parking allowance
·  Health promotion: Multisport card, sporting events and groups within Credit Suisse (skiing trips, football team, running team, tennis training course etc.)
·  Employee discounts on various products and services (event tickets, consumer products, etc.)
·  Relocation package
·  Employee Referral Program
·  Flexible work schedule and working from home (home office)

If you apply for this role this means you agree with the following statement:

“Through my application for a role with Credit Suisse (Poland) sp. z.o.o. (the Company) I hereby authorize the Company to process my personal data for the purposes of job recruitment. Furthermore I declare that I am aware of the voluntary submission of data and I am informed about the right to access the data and the right to correct it, pursuant to the Personal Data Protection Act of 29 August 1997 (Journal of Laws [Dz.U] No. 133, item 883)”. I authorize Company to process my personal data for future recruitment processes.

Furthermore, I authorize Credit Suisse Group AG and its' affiliates, Taleo (UK) Limited, cut-e AG Kleiner Burstah 12 and milch & zucker The Marketing & Software Company AG to process my personal data.

Credit Suisse and affiliates registration details.-

Credit Suisse (Poland) sp. z.o.o Registered office – 1 Icchoka Lejba Pereca Street, 00-849 Warsaw
Credit Suisse Group AG Registered office - Paradeplatz 8, 8001 Zurich, Switzerland and its' affiliates
Taleo (UK) Limited Registered office - 78-586 Chiswick High Road, London W4 5RP, United Kingdom,
Cut-e AG Kleiner Burstah 12 Registered office - 20457 Hamburg, Germany and
Milch & Zucker The Marketing & Software Company AG Registered office - Küchlerstraße 1, 61231 Bad Nauheim"