Cybersecurity and Data Protection Specialist (DPO) - Xerox Espana, S.A.U.

General Information

Press space or enter keys to toggle section visibility

Description & Requirements

Press space or enter keys to toggle section visibility

• Carries out risk assessment within a defined functional or technical area of business. Uses consistent processes for identifying potential risk events, quantifying and documenting the probability of occurrence and impact on the business. Refers to domain experts for guidance on specialized areas of risk, such as privacy, security architecture and environment. Coordinates the development of countermeasures and contingency plans.
• Applies standard procedures to enhance security or resilience to system interruptions. Can take immediate action in an incident to limit business impact and escalates event to higher authority.
• Applies and maintains specific risk management controls as required by organizational policy and local risk assessments to maintain confidentiality, integrity and availability of business information systems. Determines when issues should be escalated to a higher level. Demonstrates effective communication of risk management issues to business managers and others.
• Maintains knowledge of specific technical specialisms, provides detailed advice regarding their application, executes specialized tasks. Implements and administers risk management technologies and process controls in a given specialism, and conducts compliance tracking. The specialism can be any area of information or communication technology, technique, method, product or application area.

• Carries out risk assessment within a defined functional or technical area of business. Uses consistent processes for identifying potential risk events, quantifying and documenting probability of occurrence and impact on the business.
• Refers to domain experts for guidance on specialized areas of risk, such as privacy, compliance, architecture, finance and environment.
• Co-ordinates response to quantified risks, which may involve acceptance, transfer, reduction or elimination. Assists with development of agreed countermeasures and contingency plans.
• Monitors status of risks, and reports status and need for action to senior management.

• Applies procedures to assess security of information and infrastructure components. Identifies risks of unauthorized access, data loss, compromise of data integrity, or risk of business interruption.
• Reviews compliance to information security policies and standards. Applies procedures to assess compliance of hardware and software configurations to policies, standards, legal and regulatory requirements.
• Communicates information assurance issues effectively to users and operators of systems and networks

• Demonstrates effective communication of security issues to business managers and others.
• Develops and maintains knowledge of the technical specialism by, for example, reading relevant literature, attending conferences and seminars, meeting and maintaining contact with others involved in the technical specialism and through taking an active part in appropriate learned, professional and trade bodies.
• Maintains an awareness of current developments in the technical specialism.
• Applies and maintains specific security controls as required by organizational policy and local risk assessments to maintain confidentiality, integrity and availability of business information systems.
• Determines when security issues should be escalated to a higher level.
• Analyzes incidents and problems to show trends and potential problem areas, so that actions can be taken to minimize the occurrence of incidents and to improve the process of problem reporting, analysis and clearance. Assesses and reports the probable causes of incidents and consequences of existing problems and known defects.
• Conducts security control reviews in well defined areas.
• Provides advice, both reactively and pro-actively, to those engaged in activities where the technical specialism is applicable, including those in areas such as budgetary and financial planning, litigation, legislation, and health and safety.
• Identifies opportunities to apply the technical specialism within employing organization and closely associated organizations, such as customers, suppliers and partners, and advises those responsible.
• Carries out specific assignments related to the technical specialism, either alone or as part of a team.
• Maintains knowledge of the technical specialism at a detailed level, and is responsible for own personal growth and technical proficiency.

• Academic Background: Degree in Computer Science, Cybersecurity,  IT Engineering, Telco, or a related field.
• Language: Spanish and English fluent speaker – professional level.
• Experience: Minimum of 3-5 years of experience in cybersecurity and data protection.
• Proven experience managing SaaS products

• Certified Information Systems Security Professional (CISSP): Advanced certification that validates the ability to design, implement, and manage a cybersecurity program.
• Certified Information Security Manager (CISM): Focused on information security management and IT governance.
• Certified Data Protection Professional (CDPP): Specific to data protection and GDPR compliance.
• Certified Information Privacy Manager (CIPM): privacy program administration to establish, maintain and manage a privacy program across all stages of its life cycle.

• Deep knowledge of data protection regulations (GDPR).
• Deep knowledge of the NIS, NIS2 and DORA EU Directives.
• Experience in managing security incidents.
• Analytical and problem-solving skills.
• Ability to work in a team and communicate effectively.
• Knowledge of security tools and technologies (firewalls, IDS/IPS, SIEM).