ENS and 27001 Compliance Consultants

We have quite a bit of regulation ahead of us and we need people who can open documents, grab a coffee, and think: “Let’s see what we have here…”

At PROCESIA we are looking for ENS and 27001 Compliance Consultants to join a project where we will need to review, analyze, and implement security requirements in complex technological environments.

And yes, here ENS and 27001 will appear quite often and they don’t come alone, we will also have NIS2, ISO 27005, and the CCN-STIC guides around.

What will you do?

We need people capable of analyzing how the security of an environment is designed, identifying risks, and checking if the implemented measures are truly up to the requirements.

• You will work on the definition, implementation, and supervision of security architectures .
• You will analyze information systems and technological environments to identify risks and vulnerabilities .
• You will review technical controls such as network segmentation, MFA, privileged access management, hardening, and information protection .
• You will evaluate compliance with the requirements established by ENS, NIS2, ISO/IEC 27001, and ISO/IEC 27005 .
• You will use the CCN-STIC guides as part of the analysis.
• And you will have to do something especially important: convert regulatory requirements into concrete technical measures .

What do we need?

• MECES 2 or higher university degree in Computer Engineering, Telecommunications, Information Technology, or technical areas related to cybersecurity.
• At least 3 years of experience in information security and cybersecurity, working with security architectures in complex technological environments.
• And 2 valid certifications from the following: CISA · CRISC · CISSP · CCSP · OSCP · CEH · CHFI · Security+ · CSX · AWS Cloud Practitioner · GSEC · CCNP Security · ISO 22301 · ISO 27001
• Certain university master's degrees and academic programs of 1,500 hours or more related to cybersecurity or information security are also considered.

What do we offer?

• Permanent contract and full-time employment from the start .
• On-site work model and flexibility.
• Continuous training, career plan, English language, and certification support .
• Specialized team and relevant technological projects.
• Management 3.0 , because here having a say should not be exclusive to those who lead the meeting.
• Comprehensive health insurance with no co-payments.
• Coffee and tea in the office to accompany reviews, evidence, and the occasional endless document.
• And Christmas Eve and New Year's Eve off , which should also be part of any good management system.