Szenior IT Biztonsági Sérülékenységkezelési szakértő

As an IT GBDS Security, Audit & Compliance Analyst you will ensure GBDS IT systems and services (Finance, Procurement, Legal, SAP) comply with security policies, regulations, audit standards, and internal controls. The role leads security governance, risk management, audits, segregation of duties (SoD), ITGCs, and compliance initiatives. Working with auditors, security teams, service providers, and business stakeholders, it drives control effectiveness, risk mitigation, and regulatory compliance.

IT Security Governance

• Support the development, implementation, and continuous improvement of IT security policies, standards, and procedures.

• Ensure compliance with corporate cybersecurity requirements and governance frameworks.

• Monitor adherence to established security controls across SAP and non-SAP applications.

• Support security risk assessments and remediation activities.

• Promote security awareness and compliance best practices across IT and business teams.

• Collaborate with Information Security teams on security initiatives and governance programs.

Security & Access Governance

• Coordinate user access governance processes across applications and platforms.

• Monitor and review user provisioning, privileged access, and role assignments.

• Support Segregation of Duties (SoD) analysis, mitigation, and remediation activities.

• Ensure authorizations and access controls align with corporate policies.

• Assist in periodic user access reviews and certification processes.

• Support security enhancements and continuous improvement initiatives.

Audit Management

• Coordinate internal and external IT audit activities.

• Act as the primary contact for auditors regarding IT controls.

• Prepare, collect, and maintain audit evidence and supporting documentation.

• Monitor audit findings and coordinate remediation plans.

• Track closure of audit observations and management actions.

• Ensure audit readiness across systems, interfaces, and supporting technologies.

Risk & Compliance Management

• Identify, assess, and monitor IT and risks.

• Maintain risk registers and support risk mitigation planning.

• Perform compliance reviews and control effectiveness assessments.

• Support implementation of risk-based security and compliance measures.

• Monitor compliance with regulatory, legal, and corporate requirements.

• Escalate material compliance risks and control deficiencies where appropriate.

IT General Controls (ITGC)

• Monitor and assess IT General Controls including: 

• Coordinate periodic control testing and validation activities.

• Support remediation of control weaknesses and deficiencies.

• Ensure controls remain aligned with audit and compliance requirements.Compliance Monitoring & Reporting

• Develop and maintain compliance dashboards, KPIs, and reporting metrics.

• Monitor compliance performance across systems and service providers.

• Provide regular reporting on security, audit, and compliance status.

• Identify trends, recurring findings, and improvement opportunities.

• Support management reporting and executive updates.

Vendor & Third-Party Compliance

• Support assessment of IT vendors, AMS providers, hosting partners, and third parties against security and compliance requirements.

• Monitor vendor compliance obligations and contractual control requirements.

• Participate in supplier risk assessments and governance reviews.

• Ensure third-party services align with corporate security standards.

• Track remediation activities resulting from vendor assessments.

Regulatory & Policy Compliance

• Support compliance initiatives related to:

o SOX (Sarbanes-Oxley)o GDPR and Data Privacy requirementso Information Security Standardso Internal Control Frameworkso Corporate Governance Policies 

o Industry-specific regulatory requirements

• Ensure policies and procedures remain current and effective.

• Support regulatory audits and compliance assessments.

For thousands of people every day, we are more than just a dairy company. To our farmers, our employees, the communities we serve, the businesses we work with and the people to whom we bring happiness, FrieslandCampina means something more. For them it's not just about what we do, but who we are.

We value talented people from any background who want to contribute to something bigger than themselves. We encourage all of our employees to make decisions that benefit our entire company. At FrieslandCampina we own our own career and act accordingly. We trust you to make a difference in your job and influence the bigger picture. Working at FrieslandCampina means you are contributing to a better world.

Requisition Number: 77211

**The company built on breakthroughs.

Join us.**
Corning is one of the world’s leading innovators in glass, ceramic, and materials science. From the depths of the ocean to the farthest reaches of space, our technologies push the boundaries of what’s possible.

How do we do this? With our people. They break through limitations and expectations – not once in a career, but every day. They help move our company, and the world, forward.

At Corning, there are endless possibilities for making an impact. You can help connect the unconnected, drive the future of automobiles, transform at-home entertainment, and ensure the delivery of lifesaving medicines. And so much more.

Come break through with us.

The global Information Technology (IT) Function is leading efforts to align IT and Business Strategy, leverage IT investments, and optimize end to end business processes and associated information integration technologies. Through these efforts, IT helps to improve the competitive position of Corning's businesses through IT enabled processes. IT also delivers Information Technology applications, infrastructure, and project services in a cost efficient manner to Corning worldwide.

Scope Of Position
We are seeking an experienced and highly skilled Network Engineer to join our team. In this position, you will be at the forefront of designing, implementing, and optimizing innovative network solutions. This role requires a deep understanding of advanced networking technologies and a commitment to driving excellence in network operations.

As a Network Engineer, act as a subject matter expert across a diverse range of networking technologies and platforms. If you have in-depth knowledge of SD-WAN, routing protocols such as BGP and OSPF, EVPN-VXLAN, and switching technologies (Arista and Cisco), combined with expertise in wireless networks (particularly MIST) and advanced automation skills using tools like Ansible and APIs for Infrastructure as Code, we want to hear from you. Experience in OT manufacturing environments is a strong plus!

Responsibilities

• Design and implement advanced network solutions including SD-WAN, EVPN-VXLAN, and complex routing/switching environments using Arista and Cisco platforms.
• Configure, troubleshoot, and optimize enterprise-grade routing protocols (BGP, OSPF) and switching technologies to ensure resilient and efficient network performance.
• Architect and manage wireless infrastructure with a focus on MIST-based solutions, ensuring high availability, performance, and seamless user experience.
• Develop and maintain automation workflows using Ansible, Terraform and other tools. Leverage APIs to enhance network scalability, reliability, and operational efficiency.
• Stay current with industry certifications and trends to maintain technical leadership and support team growth.
• Participate in the on-call rotation to provide after-hours support and ensure network reliability.

Required Qualifications

• Bachelor's degree in Information Technology or equivalent combination of education and experience
• Minimum of 5 years of experience in IT as a network engineer
• Fluent in English, with excellent verbal and written communication skills
• Strong interpersonal abilities to collaborate effectively across teams and stakeholders.
• Proven ability to lead and contribute to cross-functional teams in dynamic global environments.
• Skilled in prioritizing multiple initiatives and managing competing demands in fast-paced settings
• Deep understanding of enterprise network technologies including LAN, SD-WAN.
• Advanced proficiency in routing protocols such as BGP and OSPF, and switching technologies
• Hands-on experience in EVPN-VXLAN deployments for scalable and secure data center networking
• Extensive knowledge of Cisco/Arista platforms, including configuration and optimization.
• Strong expertise in designing and managing wireless networks.
• Advanced skills in network automation using Ansible, Python, and RESTful APIs
• Familiarity with network monitoring and troubleshooting tools to ensure operational excellence

Desired Skills

• Relevant certifications such as CCNP, Arista ACE L5 or equivalent is highly preferred.
• Hands-on experience with MIST wireless solutions, including design, deployment and performance optimization
• Hands-on experience with cloud networking (e.g., AWS, Azure, Google Cloud) and hybrid cloud environments.
• Proficiency with Arista, especially in data center and campus environments.
• Financial acumen to support budgeting, cost analysis and vendor negotiations in network infrastructure.

Travel Requirement

• Potential travel of up to 30%, which may include international destinations. During critical projects may be higher.

Corning is committed to providing equal employment opportunities and considers requests for reasonable accommodations in accordance with applicable laws. Individuals with disabilities or sincerely held religious beliefs may request reasonable accommodations to participate in the application or interview process, perform essential job functions, or access other benefits and privileges of employment. To submit a request for reasonable accommodation related to disability or religion, please contact us at accommodations@corning.com .

About This Role
Cilium Tetragon is a flexible, Kubernetes-aware security tool, with real-time observability and enforcement. Leveraging the power of eBPF, Tetragon offers a low-overhead, in kernel solution that enhances security posture by monitoring system behaviors such as process executions, system call activities, and both network and file access events.

Tetragon Threat Detection Engineers primarily focus on creating and maintaining

Tetragon runtime security policies, based on the latest threat intelligence, vulnerability disclosures, and their own research.

Policies can act either as a mitigation to known vulnerabilities or as monitoring and protection against unknown security issues.

What You’ll Do

• Develop and maintain Tetragon runtime security policies to ensure customers have good visibility of suspicious activity on their infrastructure and are protected against the latest emerging threats
• Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture
• Monitor vulnerability disclosures (CVEs) and the latest threat intelligence to develop Tetragon runtime security policies
• Work with software engineers at Isovalent and Cisco to improve and enhance the capabilities of Tetragon security policies
• Interact with solution architects and customers as necessary to support and deploy Tetragon security policies in production
• Publish content and give talks based on your work

Minimum Qualifications

• 3+ years of experience in threat and/or vulnerability research
• 3+ years of experience in developing security detections at scale, for use in a wide range of environments
• 3+ years of experience working on Linux system security (e.g., capabilities, LSMs, etc.)
• Good communication skills, both written and verbal

Preferred Qualifications

• Experience with eBPF (extended Berkeley Packet Filter) and its applications in security.
• Experience with the cloud-native ecosystem (containers, Kubernetes, etc.) and their Linux implementation (e.g., Linux cgroups, namespaces)

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.

Description & Requirements
Kit keresünk
Olyan szakembert keresünk, aki otthonosan mozog a kiberbiztonsági megfelelés világában, és szívesen dolgozik ügyfelekkel valós, komplex kihívásokon.

• Van már tapasztalatod
  kiberbiztonsági vagy IT biztonsági megfelelésben
  , és érdekelnek a
  szabályozói keretrendszerek
  (különösen a NIS2)
• Szívesen támogatnád ügyfeleinket abban, hogy
  felkészüljenek és megfeleljenek a NIS2 követelményeinek
• Tanácsadói szemlélettel gondolkodsz:
  szereted átlátni az összképet, strukturálni a problémákat és gyakorlati megoldásokat adni
• Komfortosan mozogsz projektkörnyezetben, ahol fontos a határidők tartása és a minőségi szállítás

Ha magadra ismertél, és szívesen dolgoznál egy nemzetközi csapatban egy gyorsan fejlődő, nagy hatású területen — nálunk a helyed 🚀

Kit keresünk a pozicióra?

• 3–5 év releváns tapasztalat kiberbiztonság, IT biztonság, információbiztonsági megfelelés, audit vagy szabályozási tanácsadás területén
• A NIS2 irányelv és kapcsolódó európai/hazai szabályozások ismerete (pl. NIS2, CER, ENISA ajánlások)
• Tapasztalat gap analízisek, érettségfelmérések és kontrollkörnyezetek értékelésében
• Magabiztos projektmenedzsment készségek
• Analitikus, strukturált gondolkodásmód
• Magabiztos angol nyelvtudás szóban és írásban
• Erős kommunikációs készség – komplex témák érthető bemutatása üzleti és vezetői szinten

Előnyt jelent:

• Tapasztalat kritikus infrastruktúrák, pénzügyi szektor vagy más szabályozott iparág területén
• Szakmai minősítések (pl. ISO 27001, CISM, CISSP, CISA)
• Technológiai háttér (pl. logelemzés, incidenskezelés, SOC működés, kockázatértékelési módszertanok)
• Német nyelvtudás

Amivel foglalkozni fogsz
Mire számíthatsz ebben a pozícióban?

• NIS2 gap analízisek, érettségfelmérések és kockázatértékelések végrehajtása
• Megfelelési roadmap-ek és kontroll-keretrendszerek kialakítása
• Biztonsági folyamatok kidolgozása (pl. incidenskezelés, beszállítói kockázat, üzletmenet-folytonosság)
• Műszaki és szervezeti intézkedések meghatározása és dokumentálása
• Workshopok és prezentációk tartása ügyfeleknek
• Projektek koordinálása — határidők, scope, szállítás kézben tartása
• Részvétel regionális és európai NIS2 projektekben

Amit kínálunk
Csatlakozz nemzetközi csapatunkhoz, és dolgozz olyan innovatív kiberbiztonsági projekteken, amelyekkel valódi hatást érhetünk el! Nálunk olyan környezetben dolgozhatsz, amely ösztönzi a tanulást és a fejlődést, lehetőséget ad készségeid fejlesztésére, miközben hozzájárulhatsz kritikus biztonsági projektek kezdeményezéséhez és megvalósításához. Ha fontos számodra, hogy értékelik a szakértelmed, egyben Te is alakíthatod a kiberbiztonság jövőjét, csatlakozz hozzánk!🚀

👉Juttatások:

• SZÉP Kártya
• Kiterjesztett egészség- és nyugdíjbiztosítás– Medicover szolgáltatásokkal, valamint egészség- és nyugdíjpénztári hozzájárulással.
• Gyermekgondozási támogatás– bölcsődei vagy óvodai szolgáltatásokhoz.
• Csoportos élet- és DCE utasbiztosítás– átfogó biztosítás a biztonság és a nyugalom érdekében.
• BeWell 360 Program– sporttevékenységek, mentális egészség workshopok, konditerem-kedvezmények és munkavállalói támogatás.
• Szakmai fejlődés– szakmai és soft-skill tréningek és karrierépítési lehetőségek.
• Éves teljesítménybónusz– a kiemelkedő munkavégzés és elkötelezettség jutalmazására

Kiválasztási folyamat

• Recruiter kollégáink átnézik a CV-d, és ha kiválasztásra kerül, az első lépés egy10-15 perces telefonbeszélgetésa motivációdról.
• Szakmai interjú körök- személyes jelenléttel.

A Deloitte-ról