Senior Manager - OT Security

About us

Insightful is a market-leading platform for workforce analytics. We process really big data, synthesize it into actionable insights, and ultimately provide an easy-to-use product that empowers enterprise customers to improve employee productivity, business processes, and overall staff well-being.

Job Description

We are looking for an Information Security Manager to join Insightful. In this role, you will act as the primary point of contact for all InfoSec matters across the organization, ensuring our security posture remains strong, compliant, and aligned with our business goals.

Key Responsibilities:

• Security Leadership & Compliance:
  Act as the main point of contact for all Information Security topics across the organization. Implement, maintain and own InfoSec controls compliance and lead/oversee audit processes for SOC 2 Type II and ISO 27001 certification.
• Cross-Functional Collaboration:
  Partner with Development, DevOps, IT, and Product teams as a subject matter expert. Ensure solution architectures align with InfoSec best practices and actively mitigate identified security risks.
• Legal Collaboration:
  Work closely with Legal on compliance with emerging InfoSec laws and identify security-related redlines in customer contracts.
• Customer Enablement:
  Partner with our
  Sales, Customer Success, and Support
  teams to address prospective or active customer inquiries, security assessment questionnaires, and audit requests.
• Incident Response:
  Assist and guide the Incident Response team in handling, investigating, and resolving any potential security events of interest.
• Security Architecture & Monitoring:
  Propose and drive continuous improvements to current security architecture and monitoring mechanisms to safeguard Insightful’s business-critical assets.
• Risk Management:
  Support the management team with strategic expertise in information security risk management.
• Security Awareness:
  Own and drive information security awareness training activities for both new and existing employees.

You are a great fit for this role if you have:

• 5+ years
  of proven experience as an Information / IT Security expert.
• A track record of leading
  at least one successful SOC 2 Type II, ISO 27001, or similar security audit
  (driving the process from initial implementation, through the audit to the official report/certificate).
• Solid knowledge of security architecture principles.
• Familiarity with modern cloud technologies (such as GCP, AWS, Azure).
• Ability to translate complex security and privacy concepts into clear, actionable business terms.
• Excellent communication skills, with fluent verbal and written English language skills.

Bonus points if you have:

• Experience with AI security concepts, risk frameworks, and safe AI deployment practices.
• Relevant information security certifications

Zadaci

• Further development and operation of our SIEM solution, including the configuration, monitoring and optimization of dashboards, searches, alerts, use cases and reports
• Analyze substantial amounts of security data to identify potential security incidents, reduce their impact and provide recommendations to prevent future security breaches
• Carry out risk assessments and evaluate the information security of new products (hardware, software and services) as part of requirements and procurement processes
• Contribute to security audits and prepare audit reports and technical documentation
• Actively participate in the implementation of current IT security measures within the STRABAG Group

Vaše kvalifikacije

• Completed degree in Computer Science, Information Technology, Business Informatics or a comparable field, or an equivalent qualification
• At least 3 years of hands-on experience in a Security Operations Center (SOC), focusing on SIEM, security monitoring, incident detection and response
• Ability to understand network traffic and detect,monitor, and investigate potential security threats across network, remote, and cloud systems
• Experience with common security tools such as Microsoft Defender and SPLUNK
• Strong understanding of network traffic and common cyber threats such as malware, phishing and DDoS attacks, including the ability to detect and investigate potential security incidents
• Strong analytical and communication skills, with the ability to work independently and as part of an international team; good command of English and German

Additional Experience In The Following Areas Is An Advantage

• Vulnerability assessments, penetration testing or ethical hacking
• Digital forensics, malware analysis or reverse engineering
• Implementation of IT security solutions in a project environment

Zadaci

• Further development and operation of our SIEM solution, including the configuration, monitoring and optimization of dashboards, searches, alerts, use cases and reports
• Analyze substantial amounts of security data to identify potential security incidents, reduce their impact and provide recommendations to prevent future security breaches
• Carry out risk assessments and evaluate the information security of new products (hardware, software and services) as part of requirements and procurement processes
• Contribute to security audits and prepare audit reports and technical documentation
• Actively participate in the implementation of current IT security measures within the STRABAG Group

Vaše kvalifikacije

• Completed degree in Computer Science, Information Technology, Business Informatics or a comparable field, or an equivalent qualification
• At least 3 years of hands-on experience in a Security Operations Center (SOC), focusing on SIEM, security monitoring, incident detection and response
• Ability to understand network traffic and detect,monitor, and investigate potential security threats across network, remote, and cloud systems
• Experience with common security tools such as Microsoft Defender and SPLUNK
• Strong understanding of network traffic and common cyber threats such as malware, phishing and DDoS attacks, including the ability to detect and investigate potential security incidents
• Strong analytical and communication skills, with the ability to work independently and as part of an international team; good command of English and German

Additional Experience In The Following Areas Is An Advantage

• Vulnerability assessments, penetration testing or ethical hacking
• Digital forensics, malware analysis or reverse engineering
• Implementation of IT security solutions in a project environment

As Risk & Controls Expert IT you are responsible for the IT assurance program with a primary focus on assurance over the SAP S/4 HANA system. In this role you will be responsible for setting up, developing and monitoring the relevant SAP system controls and supporting the local Risk & Control teams that operate in our European brands. As part of the Risk & Control function, you will support and direct the business to be in control and provide insights into control effectiveness, control weakness and remediation actions.

About Ahold Delhaize
We’re Ahold Delhaize, one of the world’s largest food retail groups and a leader in both supermarkets and e-commerce. Together with our 17 strong local retail brands in the United States, Europe and Indonesia, we make a meaningful difference in the lives of our brands’ customers, our people and the world around us. We offer a highly dynamic, international work environment in which our associates thrive.

Your new work environment
Running a sustainable business, where risks are managed in a responsible way, requires increased utilization of automation and IT systems. As part of the company’s second line of defense, the Risk and Controls (R&C) function supports global and local senior management in ensuring the design of an effective and efficient internal control framework. In specific, the R&C department is responsible for:

• Providing guidance, establishing an Internal Control Framework over ITGCs and system controls, and providing assurance on controls designed to mitigate identified risks;
• Advising and supporting IT /IS business in designing controls and remediating issues;
• Executing a risk-based approach for key control monitoring;
• Regular reporting of results to the R&C Director and Senior Management.

Key focus areas of your role
As the Risk & Controls Expert IT, you will be assigned to an internal project to implement SAP S4/HANA and other project related applications. You will be a part of the ‘Security & Controls’ project stream with a focus on supporting the design and implementation of the relevant S4/HANA automated controls, configurations, interfaces, and ITGCs, including the GRC design.

Key responsibilities include, but are not limited to:

• Assessing the completeness of IT controls within the SAP S4/HANA global framework
• Assessing the design of IT controls within the SAP S4/HANA global framework, including automated controls, configurations, interfaces, and workflows
• Collaborating with the Security & Controls project team, business leads, and project consultants to manage the control framework implementation through go-live
• Supporting the business leads and project consultants on requirements for testing evidence
• Coordinating with the EU & US IT R&C to leverage existing procedures and knowledge share
• Designing the testing and monitoring instructions for key IT controls
• Providing training to R&C personnel on SAP basics
• Liaising with internal and external auditors / consultants

What’s in it for you?
At Ahold Delhaize, we create a caring culture where you feel safe and supported. Being part of our family of brands comes with cross-cultural teamwork, international experience, and room to explore across brands and functions. Your curiosity drives what’s next! We value your well-being, both at work and beyond. That’s why we offer benefits like flexible work options & well-being initiatives. This way, you can add something meaningful to our recipe. We enjoy connecting in our office and encourage you to spend at least three days a week here, based on a forty-hour work week.

Plus:

• Contract for 18 months as part of a maternity cover role, with a likelihood that the role may continue beyond the initial contract period, subject to future business needs.
• At least 26 days of annual leave
• A hybrid work model
• Private health insurance
• 12% discount in our stores
• Other benefits

The ingredients you bring
Everyone brings their unique flavor. We believe this role comes to life when you bring the following experience:

• Experienced IT professional with at least 5+ years of experience with designing, implementing, monitoring IT controls and at least 2+ years of experience in SAP S4/HANA IT controls.
• Has experience working within a multinational company who operates in a decentralized manner (i.e., global and regional IT hubs).
• Experience with working on large projects and advising on and / or implementing technical IT and IS controls at beginning of project.
• Experience in SAP implementation is a must.
• Experience around user access / provisioning / understanding role & authorization concept is a plus
• Experience in control automation and / or robotics is a plus.
• Good communication and persuasion skills. Ability to work and communicate with colleagues across all parts of the organization and with senior management.
• A critical and analytical mindset, with an eye for detail and accuracy.
• Team player with a hands-on mentality.
• Fluent in English is a requirement.

Join our recipe. Apply now!
Are you keen to join the Risk&Controls team? Even if you don’t tick all the boxes, but you still believe you have the personality and skills that make you a suitable candidate, we strongly encourage you to reach out to us. Apply now via the button on this page, or feel free to contact marko.simic@delhaize.rs if you have any questions.

At Ahold Delhaize and our local brands, we broadly define diversity as being inclusive of thoughts and skills, generational differences, LGBTQ+, gender, race and ethnicity, disabilities, nationalities and more, and we accept all people for who they are.