IT Security Consultant

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Provide consultation on prevailing trends in the methodological and technical evaluation of IT security requirements.

• Examine the IT security threat landscape while reviewing regulatory requirements and methodologies pertinent to information security.

• Oversee IT security levels, evaluate threat potentials and residual risks, and formulate actionable recommendations.

• Introduce, implement, and continuously enhance methodologies to ensure compliance with IT security requirements.

• Engage in the development of new IT security solutions and perform security assessments on both new and existing solutions.

• Offer guidance and support to IT product groups and Evonik units regarding information security.

• Advise and assist IT projects on matters related to information security.

• Share knowledge with Product Owners, Domain Architects, IP Protection, and OT Security stakeholders.

• Aid in M&A due diligence by evaluating sellers’ IT security levels and formulating temporary protective measures.

• Guide and consult on IT M&A projects throughout the information security transition.

• Contribute to IT group standards and actively participate in IT committees.

⛳️ Requirements

• A successfully completed (technical) university degree in IT security, computer science, economics, engineering, or natural sciences, or equivalent commercial/technical education in the IT sector, coupled with relevant professional experience.

• Several years of professional experience in the field of information security.

• Demonstrated expertise with concepts, protocols, strategies, and best practices in information security.

• Experience in conducting risk analyses, encompassing business impact assessments, vulnerability evaluations, effectiveness measures, and risk-reduction strategies.

• Strong understanding of how IT security tools, technologies, and regulations affect business processes.

• Familiarity with information security management frameworks such as (ISO) 2700x or the NIST Cyber Security Framework.

• Certification in IT security, such as CISM, CRISC, ISO 27001 Lead Auditor, or CISSP.

• Proficiency in English, both written and spoken.

• Knowledge of German is considered an advantage.

• Ability and willingness to engage with Evonik personnel and cultivate a professional network.

• A high level of initiative, assertiveness, collaborative skills, and team spirit.

• Willingness to travel occasionally, both nationally and internationally.

• Shift work is a requirement.

🏝️ Benefits

• Performance-based remuneration.

• Occupational health benefits.

• Hybrid and flexible working environments with #SmartWork.

• Attractive career paths.

• High-quality development programs.