Security Analyst - CyberOps M/F

Air Liquide Europe Business Services (ALEBS)was created in 2019 in Lisbon, Portugal with the mandate to provide financial services for Air Liquide European entities. In the space of 4 years, it has expanded to over 400 employees based in 3 office locations: Lisbon, Tomar and Guarda. The geographical scope was extended to include, besides the European affiliates also entities located in Africa, Middle-East and India, and the operational scope was extended and includes today not just Finance, but also Human Resources.

How will you CONTRIBUTE and GROW?

TheSecurity Analyst M/Fsupports the Information Security Officer to uphold Governance, Risk Management, and Compliance standards across Digital & IT environments. Security analysts are essential in maintaining the cybersecurity integrity of Air Liquides IT and OT systems, as well as its sensitive data by ensuring adherence of Digital & IT operations to established Global security governance.

This role integrates into a global cybersecurity organization characterized by a rich diversity of cultures, local and global operational requirements, and complex technological landscapes.

Handle validation of operational security requests - Tickets queue

• Review firewall and peering requests to verify adherence to Group policies & standards as well as industry best practices
• Analyze cybersecurity tickets, including blocked website requests, Admin access, application whitelisting requests, alongside other ad hoc cybersecurity tickets
• Identify potential security risks and understand legitimate business needs as well as operational requirements and constraints

Vulnerability management & Ad-hoc security reviews

• Manage and assess risks on vulnerabilities across critical systems including alerts generated by Group tools such as Qualys, Permanent Penetration Testing Platform (PPP), PRISMA, Security ScoreCard, Serenity, etc.
• Track vulnerability and penetration testing remediation plan
• Assess accuracy and completeness of ServiceNow CMDB data in relation to vulnerability management and other cybersecurity processes

Develop and Maintain Cybersecurity Dashboarding and Reporting tools

• Analyze current cybersecurity Key Performance Indicators to ensure appropriate cybersecurity metrics are being reported
• Compile reports around Cybersecurity KPI and distribute to identified stakeholders at defined intervals (Daily, Weekly, Monthly, Quarterly, Annually, etc)

Compliance & security controls support

• Support evidence gathering of Group CDA compliance activities
• Assist in maintaining compliance with organizational security policies and external regulations
• Support internal and external audits by providing technical inputs and evidence related to security controls

Are you a MATCH?

• Minimum 4 years of experience in Cyber Security, risk management, and/or compliance
• Certifications in information security and/or cyber security like CISSP, CISM, GSOC, MSOA, GEVA, CVA, etc.
• Demonstrate understanding of risk management, IT controls and related information security standards
• Knowledge of security control frameworks and standards such as SOC2, ISO 27001, NIST, etc
• Experience securing cloud-based environments
• Experience with regulatory requirements - GDPR, PCI, Medical, FDA, DOT, etc.
• Excellent written and verbal communication skills
• English C1

Our Differences make our Performance

At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.

We welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.