Job Purpose
The Local Security Officer (LSO) is responsible for the security of all information assets of the Heidelberg Materials Egypt organization. This role includes working with the HM Group Security team to develop and implement security policies and procedures, the management of security risks, and the response to security incidents.
Roles and Responsibilities
- Developing and implementing security policies and procedures – aligned with the Group Security Team
- Managing country specific security risks
- Monitoring and ensuring compliance with security policies and standards
- Taking actions to handle, mitigate and respond to security incidents
- Working together with the business to ensure that security is integrated into all aspects of the organization's operations
- Promoting a secure first mindset through training and cross-functional awareness campaigns
- Supporting business continuity plans
- Staying up-to-date on security threats and best practices
- Close collaboration across IT / Business departments to identify and prioritize technical security requirements in alignment with the Group Security Team
- Translation of business needs in technical & process requirements and owning the local security roadmap
- Steering on security topics and being the local single-point-of-contact to external partners and vendors in technical implementation projects
- Conducting security audits
- Data Protection Impact Assessments in the context of managing Information security risks
- First/ Single-point-of-contact within country for the Group Security department
- Identifying area-specific gaps in Security that are not covered by the Group Security program
- Reporting Country / Area specific KPIs to Country Management and Group Security
- Proactively manage Health & Safety process and procedures to achieve the company ambition of ‘0 Lost Time Injuries’ and to continuously improve the company's Health & Safety performance
- Ensure compliance requirements are met through organizational and procedural measures including implementation of Group guidelines, performing trainings, monitoring compliance etc.
EducationBachelor’s degree in computer science, computer engineer or any equivalentExperienceMinimum of 5 years of experience in IT-Infrastructure and/or security in a large enterprise and/or production focused environment (prior experience as an Information Security Officer is an advantage) with understanding of security risks and best practicesTechnical SkillsSecurity Certifications (e.g. CISSP, CISM, CCSP, CISA) or willingness to certifyAbility to work independently and as part of a teamExperience with various aspects of security management: business continuity planning, security incident response, security audits, security training, security awareness, and risk management.Excellent communication skills and presentation skills coupled with the ability to act as an interface between business departments, the internal IT-departments and the Director SecurityExcellent language skills ("Country language", English)