CyberSecurity Engineer

INGOT

The Senior Cybersecurity Engineer is responsible for developing, implementing, and maintaining the organization s cybersecurity policies, procedures, and controls. The role ensures that security practices align with leading frameworks such as NIST, ISO 27001, and COBIT, as well as regulatory requirements including GDPR and PCI-DSS. It involves overseeing both the strategic and operational aspects of cybersecurity, with a focus on embedding governance, risk management, and compliance across all business functions.

Main Responsibilities and Duties:

• Contribute on developing, implementing, and maintaining cybersecurity policies, standards, and procedures
• Ensure alignment of security controls with organizational risk appetite and compliance requirements
• Serve as a primary point of contact for the organization s SIEM solution, ensuring effective monitoring, management and issue resolution.
• Provide incident response support when required, ensuring timely investigation, mitigation and resolution of security events involving all affected internal stakeholders.
• Partner with internal teams to apply security governance frameworks (NIST, ISO 27001, COBIT, GDPR, PCI-DSS, etc.)
• Prepare and deliver governance reports for leadership and stakeholder
• Conduct security risk assessments and compliance audits to identify and mitigate gaps
• Collaborate with internal teams to maintain a unified compliance posture
• Promote cybersecurity awareness and best practices across the organization
• Any other duties relevant to the role

Required Skills & Experience:

• Bachelor's or Master s Degree in Computer Science, Information Security or a closely related discipline is required.
• 5+ years of proven experience in cybersecurity governance, compliance, or risk management
• Strong understanding of information security frameworks (NIST, COBIT, ISO 27001)
• Experience in policy development and implementation within enterprise environments
• Familiarity with compliance regulations such as GDPR, PCI-DSS, and data protection laws
• Strong analytical and documentation skills with attention to detail
• Excellent communication and stakeholder management skills
• Relevant certifications are a plus: CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, or equivalent will be considered a plus
• Fluent in English (both written and spoken)