Cybersecurity Risk Specialist

Uni Systems is a systems integrator providing consulting, design, implementation, and support in the field of ICT integrated solutions and services across 25+ countries in Europe. The company is part of the Quest Group and employs over 1800 people, serving more than 300 customers. Uni Systems offers continuous learning opportunities, including technical trainings, leadership programs, and e-learning through platforms like Udemy and SkillSoft, as well as a Mini MBA program in collaboration with ALBA Graduate Business School.

• Master’s degree with at least 9 years of relevant professional IT experience, including minimum 8 years in similar projects
• At least four of the following certifications or internationally recognized equivalents: CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC Certified ISO-27000 Specialist, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager
• Minimum 5 years of experience in cybersecurity GRC focusing on cybersecurity risk management
• Strong knowledge of cybersecurity laws, regulations, standards, methodologies, frameworks, and policies including privacy impact assessment methodologies
• Comprehensive understanding of business strategy, models, and products factoring legal, regulatory, and standards requirements
• Ability to apply data protection and privacy practices in organizational processes
• Ability to lead development of cybersecurity and privacy policies and procedures ensuring acceptance and communication
• Experience conducting, monitoring, and reviewing privacy impact assessments with recognized standards
• Ability to communicate data protection and privacy topics to stakeholders
• Adherence to ethical requirements and professional standards
• Capability to assess changes to legal frameworks impacting cybersecurity and data protection strategies
• Proven experience designing or operationalizing cyber risk management frameworks
• Hands-on experience using ServiceNow GRC modules including IRM, Risk, Policy, and Compliance
• Experience maintaining and managing a cybersecurity risk register
• Experience integrating risk management with vulnerability, incident, cloud risk, and third-party risk management
• Experience contributing to cybersecurity maturity improvement programs
• English proficiency at C1 level

• Ensure compliance with and provide legal advice and guidance on data privacy and data protection standards, laws and regulations
• Identify and document compliance gaps
• Conduct privacy impact assessments and develop, maintain, communicate and train upon the privacy policies and procedures
• Enforce and advocate organisation’s data privacy and protection program
• Inform data owners, holders, controllers, processors, subjects, internal or external partners and entities about their data protection rights, obligations and responsibilities
• Act as a key contact point to handle queries and complaints regarding data processing
• Assist in designing, implementing, auditing and compliance testing activities to ensure cybersecurity and privacy compliance
• Monitor audits and data protection related training activities
• Cooperate and share information with authorities and professional groups
• Contribute to the development of the organisation’s cybersecurity strategy, policy and procedures
• Develop and propose staff awareness training to achieve compliance and foster a culture of data protection
• Manage legal aspects of information security responsibilities and third-party relations

Uni Systems provides equal employment opportunities and prohibits discrimination based on gender, religion, race, color, nationality, disability, social class, political beliefs, age, marital status, sexual orientation, or any other characteristics.