CYBER SECURITY MANAGER

We are not looking for a “paper janitor”, but someone who takes security maturity to the next level.
If cybersecurity is not a “checklist” for you, but a real part of organizational resilience – we invite you to join us. This is not a zero-sum role for us: the direction of cybersecurity, basic procedures and incident management principles have already been described and applied, and now we are looking for someone who will take over, strengthen and manage the security system, ensure compliance with NIS2 and smooth work with NKSC and KSIS

Development, maintenance and continuous improvement of cybersecurity policies, procedures and processes;
Ensuring cybersecurity of the organization's networks and information systems;
Cyber risk assessment, incident prevention and response coordination;
Preparation, submission and updating of documents and reports in the KSIS (Cyber Security Information System);
Coordination of the SOC (Security Operations Center) implementation, development and support processes, in cooperation with internal and (or) external partners;
Ensuring compliance with the legal acts of the Republic of Lithuania and the EU (including NIS2);
Cooperation with the IT department, management and external institutions (including the National Cyber Security Center);
Raising cybersecurity awareness among employees, organizing training and cyber hygiene initiatives;
Coordination of integration, interfaces and improvement of internal IT systems (e.g. business management, operations or other systems used in the organization - Rivilė, JobDone, etc.);
Assessment of cybersecurity requirements when implementing or changing internal IT systems, processes and integrations (assessment of the impact of changes, priorities, risks);
Preparation of periodic reports, recommendations and proposals for management.

Meet the requirements of impeccable reputation applicable to civil servants in accordance with the Law on Civil Service of the Republic of Lithuania;
Do not have any valid administrative penalties for violations of legal acts in the areas of network and information systems, personal data processing or privacy protection (at least 1 year must have passed since the appointment).

Have ≥2 years of experience in the field of IT / cybersecurity / network and information systems; or
Have a higher education in the field of IT / cybersecurity / NIS; or
Have an internationally recognized certificate in the field of cybersecurity; or
Have completed training and passed the cybersecurity manager exam in accordance with the procedure established by the NKSC.

Practical application of ISO/IEC 27001 / 27002, NIS2;
Incident management practices and documentation discipline;
Understanding of access control, change management, patch management maturity;
Ability to communicate clearly with management and non-IT professionals.

3500-4800 €/mon. gross
Salary depends on experience and competencies