Security Manager - ROC Hungary

Job Description

Why this role matters

Our purpose is to use the power of communication to make a better world. For each other, for our customers, for society and our communities.

The role holder is responsible for championing Security by providing comprehensive security risk and compliance management across all BT Operations in Hungary and in Central and Eastern European (CEE) countries where BT has a presence. This includes Romania, Czech Republic, Slovakia, Slovenia, Poland, and Bulgaria.

The Security Officer will ensure that country-specific security risks are identified, assessed, and mitigated in a cost-effective manner that aligns with the company strategic goals and delivers economic advantage. Additionally, the role holder is responsible for maintaining strong working relationships with peers across the BT Security organization, fostering collaboration, and coordinating the effective implementation of a virtual security organization, security services and processes tailored to local needs

What I’ll be doing

• Support the Security governance and alignment with stakeholders (internal and external) such Heads of LoBs, Regulators, Government authorities etc.
• Good understanding and experience around the security domains related to IT Security, Physical Security, Personnel Security, Cyber, Privacy, Data Protection, Network Security
• Having extensive experience in security risk management, threats modeling, vulnerabilities assessment
• Having extensive experience of performing information security audits across suppliers, vendors, internal shared functions like HR/IT/Procurement etc. customer security as per Industry standards like ISO 270001, NIST, NIS2, SOC, PCI-DSS etc.
• Good understanding of NIS-2 and ability to drive its compliance within the operations
• Having a good understanding of Data protection, Data privacy principles and Industry security standards, cryptography, network/application security, web security, etc.
• Understanding and experience of network perimeter security, Cyber Security operations, SIEM tools and solutions, SOC design and operations, Incident management
• Managing the day-to-day site security governance and operations by enforcing Protect BT Group Security standards and policies across business operations, suppliers, shared functions like IT, HR, Facilities management etc.
• Managing emergency response plans to deal with cyber security incidents and reporting threats to relevant bodies.
• Support managing Information Security awareness program.
• Maintains security and operational efficiency metrics through comprehensive reporting, including ad-hoc requests, historical/trend reporting, and tracking against established baseline
• Drive the ISO 27001 certificate management and maintenance
• Provide response and required support in coordination with regional Protect BT CSO
• Support the Security governance and alignment with stakeholders (internal and external) such Heads of LoBs, Regulators, Government authorities etc.
• Good understanding and experience around the security domains related to IT Security, Physical Security, Personnel Security, Cyber, Privacy, Data Protection, Network Security
• Having extensive experience in security risk management, threats modeling, vulnerabilities assessment
• Having extensive experience of performing information security audits across suppliers, vendors, internal shared functions like HR/IT/Procurement etc. customer security as per Industry standards like ISO 270001, NIST, NIS2, SOC, PCI-DSS etc.
• Good understanding of NIS-2 and ability to drive its compliance within the operations
• Having a good understanding of Data protection, Data privacy principles and Industry security standards, cryptography, network/application security, web security, etc.
• Understanding and experience of network perimeter security, Cyber Security operations, SIEM tools and solutions, SOC design and operations, Incident management
• Managing the day-to-day site security governance and operations by enforcing Protect BT Group Security standards and policies across business operations, suppliers, shared functions like IT, HR, Facilities management etc.
• Managing emergency response plans to deal with cyber security incidents and reporting threats to relevant bodies.
• Support managing Information Security awareness program.
• Maintains security and operational efficiency metrics through comprehensive reporting, including ad-hoc requests, historical/trend reporting, and tracking against established baseline
• Drive the ISO 27001 certificate management and maintenance
• Provide response and required support in coordination with regional Protect BT CSO

The skills & experience you need

• Must have 15+ years of experience in Security domain
• Graduation degree level, or equivalent professional experience with recognised qualifications in Computers or Telecommunication or IT
• Must have minimum one of these Industry certifications CISA, CISM, CISSP,
• Good inter-personal and stakeholder management skills. Able to communicate and negotiate with senior leaders
• Having the ability to build and develop working relations with external stakeholders including regulators, nodal agencies, law enforcement bodies and relevant government departments.
• Experience with regulatory frameworks, including NIS 2 and DORA.
• For NIS2 compliance in Hungary the security officer must have one of the listed certificates (either national or international): IBF Képzések listája - Nemzeti Koordinációs Központ
• Classified information processor national certification for facility security clearance: NEMZETI KÖZSZOLGÁLATI EGYETEM
• Hungarian national

Security isn’t always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.

This is an opportunity to play your part and protect our company, our customers and our communities from cyberattack. Be part of a dedicated team and get ready to be challenged every day to make the most of your skills and experience. You’ll learn from those around you, and from outstanding training and development resources to become even better at what you do. With the best technology at your fingertips, you'll be part of a friendly and flexible working environment where your contribution is always valued.

Security is one of the fastest growing parts of our global organisation. We are protecting our networks from more than 6,500 cyber attacks each day, investing over £40m in research each year - and in employing nearly 3,000 people, we’re also the largest private cyber employer in the UK. With incredible opportunities to learn, develop and grow your skills, we’ll invest in you, nurture your potential and shape your future – whatever your background or experience. ​

In today’s world, safe and secure digital connections have never been more vital. You’ll be joining a global company operating at the forefront of the information age: BT employs 90,000 people in 180 countries. With huge scale, we’re capable of achieving great things, striving to be personal, simple, and brilliant for our customers whilst creating an inclusive working environment where people from all backgrounds can succeed. Play your part. Make a difference. We are the Protectors.

A FEW POINTS TO NOTE:

Although these roles are listed as full-time, if you’re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.