Cyber Security Engineer – Corporate IT

About the role

We are looking for a Cyber Security Engineer to strengthen the security posture of our Corporate IT environment. The role will serve as the main internal reference for cybersecurity, linking IT teams with our managed Security Operations Center and ensuring secure implementation of new tools and services.

Key responsibilities

• Act as the primary point of contact for cybersecurity topics across Corporate IT, advising on secure architecture and solutions.
• Review and assess new tools, services, and infrastructure changes from a security perspective before deployment.
• Support security awareness initiatives, including training programs and phishing simulations.
• Monitor the threat landscape and translate insights into prioritized risk mitigation actions.
• Own the end‑to‑end vulnerability management process: triage, prioritization, remediation coordination and reporting.
• Collaborate with system and endpoint owners to ensure timely resolution of security issues.
• Improve identity security by enhancing access policies, privileged access management and identity governance.
• Maintain a practical risk register and communicate technical findings in business terms.
• Work with the external SOC to refine detection rules and ensure incident response readiness.
• Support ISO 27001 processes, including audits and remediation of control gaps.

Required profile

• Minimum 5 years of experience in IT and cybersecurity.
• Proven hands‑on experience with EDR/XDR platforms at scale.
• Strong knowledge of identity and access security (IAM, PAM, governance).
• Experience managing vulnerability management processes.
• Familiarity with ISO 27001 environments.
• Excellent communication skills and ability to influence stakeholders without direct authority.

Required skills

• EDR/XDR platforms
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Identity governance
• Vulnerability management
• ISO 27001