Information Security Officer (f/m/x)

HEY THERE!

We are Mercedes-Benz.io. Our mission is to ignite and build the digital solutions for Mercedes-Benz by forming a tribe of digital enthusiasts that drive Mercedes-Benz digital future.

Therefore, we offer you flexibility! You can choose to work from our offices in Lisbon or Braga, or remotely from any location in Mainland Portugal. Nonetheless, our tribe is our beating heart so we often organize company events and gatherings to bring MB.ioneers together. While some are optional, we would require your presence for certain team events and/or occasions.

We don’t care about your shoes, as long as you are wearing the right attitude. At Mercedes-Benz.io we walk the talk and make things happen. We do not digitize for the sake of being digital but for a better tomorrow for our customers. That’s not our job; it’s our passion. Therefore, we love to reflect and challenge everything – the status quo, Mercedes-Benz, and ourselves. We share the same beliefs and stand up for each other and this is why we hire unique people to join our Tribe of digital enthusiasts.

We are building digital products that our customers love and we are proud of. Protecting and securing information is critical to our business. Without that, we wouldn’t be able to deliver the best digital experience to our customers.

BUSINESS OPERATIONS

You would join our Business Operations department. As a key pillar within Mercedes-Benz.io business operations, our multi-disciplinary IT Security Team consists of Information Security specialists working closely together between Portugal and Germany to establish our Mercedes-Benz.io custom made Security Culture. To be compliant with all applying regulations & security controls while preserving our agile and modern way of working is a constant challenge that we are happy to take care of.

In this full-time and permanent position, we are offering a great opportunity to take over responsibility in driving and developing our Information Security Management System, enabling our company’s teams and departments as well as ensuring a state-of-the-art security documentation within our systems.

IN THIS ROLE YOU WILL

• Further developing and implementing the cyber security strategy with adjustments for location-specific characteristics in accordance with business objectives and central requirements.

• Ensuring fulfillment of Mercedes-Benz Global Cyber Security Key Performance Indicators.

• Providing support during the processing of cyber security incidents, problems and risks that are either identified by the ISO or addressed by Global Cyber Security.

• Carrying out awareness measures and assisting global cyber security awareness campaigns.

• Being functionally involved and advising with respect to cyber security project questions.

• Assisting the Technical Owner with questions concerning the technical and organizational measures (TOMs) based on the security objectives of the information's classification.

• Assisting and advising during handling of cases of non-compliance with standards or procedural instructions.

• Providing support in data processing by evaluating the supplier's security measures.

• Assisting the CIRC in conducting necessary forensic analyses.

• Submitting evidence of a valid, predefined certification and completed test that is accredited by Global Cyber Security.

• Reporting regularly and proactively at the management level to MB.io MD´s, the ISO Coordinators.

• The tasks of the ISO are detailed in RISE. In addition, GCS provides further helpful explanations.

TO SUCCEED YOU NEED

• Fluent English

• Degree in computer science or comparable education with a focus on Information Security

• Min 3 years+ of hands-on experience in Information Security for software projects and IT architectures

• Expert knowledge and experience in one or more of the following areas: secure software development, application and mobile security, system design and design, threat modeling, risk management

• Knowledge and experience in technical and organisational areas of Information Security

• Drive to provide industry´s best practices and stay up-to-date about common threats and vulnerabilities

• Ability to discuss and evaluate technical concepts with senior experts

THERE WILL BE BIG SMILES IF YOU HAVE

• A broad understanding of our web and mobile technologies (see our Tech Stack)

• A general understanding of enterprise context and how to build digital products

• Experience with AWS, SAP, AEM and/or other CMS

• One of the following certificates: CC, AWS Cloud Practitioner, CISSP, CSSLP, CCSP, TPSSE/TISP
  

YOU WILL BE HAPPY WITH

• Open source software

• No top-down hierarchy. We trust in your self-organization

• Colleagues that are as smart, hardworking and driven as you

• An amazing open-minded and informal culture with the backup of a giant company like Mercedes-Benz

• iPhone, MacBook Pro or Dell (your choice) and noise-cancelling headphones

• Health insurance for you and your family

• Life insurance

• Proactive self-development in international Trainings and Conferences

• Language Training courses

• Brand Connection Perks

• Much more cool stuff …

THIS IS WHAT OUR PROCESS LOOKS LIKE

1. Screening call with our recruiter to get to know your motivation & your experience 

2. Technical Challenge

3. Team Fit Interview

4. Cultural Interview