Agrate Site Infosec Officer

Position description

**Posting title**:

- Agrate Site InfoSec officer M/F

**Regular/Temporary**:

- Regular

**Job description**:

- Job description
- The purpose of the job is to ensure that the ST information security framework is deployed at the Crolles site, with the objectives that information security risks are known and managed appropriately.
- Main activities:

- Infosec assurance at the site
- Perform regular reviews to detect gaps at the site vs. InfoSec framework
- Build and maintain the site InfoSec risks log, taking inputs from audits, site InfoSec reviews, requests from departments at the site, requests from Central InfoSec, site InfoSec survey, incident or anomalies
- Run the site InfoSec survey organized by Central InfoSec, ensuring complete, accurate and timely response

InfoSec governance and support at the site
- Regularly report the InfoSec posture of the site to site management
- Support all functions at the site in implementing the InfoSec framework
- Be the primary interface for the site with Central InfoSec, including for site-based InfoSec audits (certification, customer, internal) and actions triggered by Central InfoSec

InfoSec technical reference at the site
- Ensure that the technical architecture at the site is maintained, especially for the cyber security zones
- Participate to relevant IT CAB(s) at the site and help building work orders for the SOC

Site services and local solutions
- Ensure security in local IT solutions / industrial solutions, site services (such as physical security, facilities and canteen systems), labs and warehouses
- Ensure that site services follow the security procedures (security in contracts, connection to ST network, security for cloud services )
- Provide the required infosec support to achieve the above objectives

Security awareness
- Promote InfoSec awareness campaigns and materials within the site, leveraging upon the initiatives at company level from Central InfoSec
- Pro-actively propose initiatives to raise InfoSec awareness and, after agreement with Central InfoSec, deploy them within the site
- Promote within the site the need to report InfoSec incident or anomaly using the right reporting channel
- Use all opportunities to raise InfoSec awareness through the communication channels available at the site

Security incident management
- Report InfoSec incidents and anomalies to Central InfoSec
- Provide timely answers to CSIRT queries and help resolving cases

Infosec day to day operations
- Support the preparation of security exception requests
- Review requests at the site that require site InfoSec officer approval

**Profile**:

- Profile
- This position is for a cyber-security professional with 5-10 years of experience covering several domains of information security.
- Ability to cover the entire scope of information security- Experience in delivering security training and briefing sessions with management
- Ability to interact with people at all levels of the organization
- Excellent facilitation, communication and influence skills
- Ability to treat several topics in parallel, to "clarify the unknown", to translate technical aspects into risks and to communicate on those risks
- Ability to consider short-term as well as longer term actions and to anticipate.
- Trustworthy and Rigorous.
- High level of autonomy and pro-activity
- Security certification is a plus (CISSP)
- Language spoken at the site is a must, English at minimum B2 (CEFR scale)
- Experience working in an international environment is a plus
- This position may require occasional travels in ST worldwide

Position location

**Job location**:

- Europe, Italy, Agrate

**Education level required**:

- 4 - Bachelor degree

**Experience level required**:

- 6-10 years

**Languages**:

- Italian (3- Advanced)
- English (2- Business fluent)

Requester

**Desired start date**:

- 03/04/2023