Cybersecurity Analyst (m/f/n)

SHIMI Sp. z o.o.

• Education: EQF7 in IT, Information Technology, Information Security or a similar domain.
• At least 15 years of professional experience.
• At least 5 years experience with cross-border electronic identification and trust services, including eIDAS1, eIDAS2, eID Profile, and EUDI framework.
• At least 7 years of interoperability expertise in designing interoperable solutions for public administrations, including European institutions.
• At least 7 years experience with cybersecurity policies and guidelines for open source or Information Systems.
• At least 3 years of IT Risk Management experience with ITSRM2 methodology.
• At least 2 years experience with Once-Only principle supporting information systems, including implementation at any level of public administration.
• Experience in advising on cybersecurity policies and regulations.
• Experience in conducting risk assessments based on ITSRM2 methodology.
• Experience in defining, implementing and updating security plans.
• Experience in supporting development teams through SDLC.
• Experience with EC security standards and industry best practices, including OWASP Top 10.
• Experience in operationalising monitoring and vulnerability management standards.
• Experience in collaborating with IT and business teams.
• Experience in conducting security training and awareness activities.
• Experience leading security-related working groups.
• Experience supporting electronic identification solutions based on eIDAS2 and EUDI framework.
• Experience drafting technical specifications and providing security expertise.
• Experience supporting development and DevSecOps teams.
• TOGAF9 certification or standard knowledge.
• English language proficiency at minimum B2 level, strong written and oral communication skills.
• CV submission in Europass format.

Nice to have:

• Experience with cloud security architectures and controls.
• Experience with OWASP.
• Experience with secure data exchange.
• Experience with electronic signatures.
• Experience with web services.

• Advise on cybersecurity policies and regulations to ensure project compliance.
• Conduct risk assessments based on ITSRM2 methodology.
• Define, implement, and update security plans.
• Support development teams throughout the Software Development Lifecycle (SDLC) to build and operate software securely.
• Operationalise standards related to monitoring systems, security breaches, and incidents.
• Operationalise vulnerability management standards and processes.
• Collaborate with IT and business teams to ensure compliance with security standards.
• Conduct security training and awareness activities.
• Lead security-related working groups or discussions with stakeholders.
• Support electronic identification solutions based on eIDAS2 and EUDI framework.
• Draft technical specifications and provide security expertise for different technical options.
• Support development and DevSecOps teams with security recommendations.

Services must be performed from within the EU.