Overview
The IT Compliance Security Analyst is responsible for overseeing information security, cybersecurity, and IT risk management programs based on industry-recognized information security and risk management frameworks. This individual will play an integral role within the IT Security organization, helping to improve and communicate the maturity of information security, cybersecurity, and IT risk practices across the company.
The role works closely with Mitel IT to implement information security controls and processes and coordinates internal IT security operations, including networks, servers, endpoints, and applications, within their area of responsibility.
Mission
•Work with CISO functional leads, Global IT Managers, and local management to implement information security policies across the assigned perimeter.
•Collaborate with Mitel IT on the implementation of information security controls and processes.
•Coordinate internal IT security operations, including network, server, desktop, and application security activities within the assigned perimeter.
Responsibilities
•Develop, implement, and manage the Information Security Management System (ISMS) within Mitel IT, aligned with CISO functional leads and Global IT Managers, ensuring consistency at a global level.
•Implement security strategies and policies for Mitel IT across infrastructure, applications, processes, and people.
•Obtain local management approval and support for security strategies and initiatives.
•Assess and report local and global security risks related to IT solutions and services.
•Provide comprehensive risk assessments, information security evaluations, and business impact analyses to the Global Business Security Office (GBSO).
•Contribute to the achievement of global security objectives and targets defined by Mitel.
•Centralize, monitor, and report on security key performance indicators (KPIs).
•Support and oversee security audits and certification initiatives, including ISO 27001 audits, and ensure the timely remediation of audit findings and recommendations.
•Qualify, investigate, and report on security events and incidents, ensuring root causes are properly identified and addressed.
•Contribute to risk remediation activities, incident response processes, and efforts to minimize exposure to internal IT assets.
•Participate in crisis management activities when required.
•Inform the CISO and Incident Management Team of major security incidents and contribute to mitigation and recovery efforts.
•Work closely with other security analysts to implement and maintain appropriate security controls and standards.
•Support the definition and execution of global security projects, as well as due diligence activities, acquisitions, and integration initiatives.
•Contribute to the successful delivery of security-related projects and services.
Requirements
•Bachelor's degree or equivalent in Computer Information Systems, Management Information Systems, Computer Science, or a related field.
•Minimum of 5 years of experience in Information Security, Cybersecurity, IT Risk Management, or a related discipline.
•Experience in risk management, compliance programs, and information security policy development.
•Strong analytical and problem-solving skills, with the ability to assess complex issues, manage risk, and make timely, well-informed decisions.
•Experience developing and delivering security awareness and education programs.
•Excellent organizational, verbal, and written communication skills.
•Strong knowledge of IT processes, controls, and risk management frameworks.
•Working knowledge of information security standards and regulatory requirements, including ISO 27001.
•Experience with incident, vulnerability, and exception management processes.
•Ability to work effectively across global teams and collaborate with technical and non-technical stakeholders.
•Fluency in English is required; German language skills would be considered an advantage.
Preferred Qualifications
•Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent.
•Experience supporting security audits and compliance assessments within multinational organizations.
•Knowledge of security governance, risk, and compliance (GRC) tools and processes.
•Familiarity with cloud security frameworks and modern cybersecurity best practices.
