Cybersecurity Engineer (d/m/f)

ALSO Holding AG (ALSN.SW) (Emmen/Switzerland) is one of the leading technology providers for the ITK industry, currently active in 31 European countries and in many other countries worldwide via PaaS partners. The ALSO ecosystem includes a total potential of more than 135 000 resellers, which we offer hardware, software and IT services of more than 800 Vendors in over 1 570 product categories. For the purposes of the circular economy, the company makes available all services from one source to another. Business activities include supply, solutions and service. Supply includes the transactional range of hardware and software. Solutions supports customers in developing tailor-made IT solutions. Subscriptive-based cloud offerings as well as digital platforms for IoT, cybersecurity, virtualization and AI are at the heart of the service area. The main shareholder is Droege Group, Düsseldorf, Germany. For further information, see https://so.com.

Fulltime in Germany or other ALSO Country (HR-6715 and HR-6716) As a Cybersecurity Engineer you will be responsible for identifying and mitigation of information security issues that may pose short and long term risks to company's business, customers, shareholders, suppliers and partners. You will monitor systems and networks, assess and analysis alarms, detect and report on security threats and intrusion attempts, either resolving or escalating them. You want to participate in planning of ALSO Group cybersecurity strategy and related projects, ensuring the security in implementation of IT and business projects. Important part of the work will be around deployment of security controls and policies, providing cybersecurity awareness to employees, collaboration with Group Management and alignment with them on tasks and priorities. Leading the tasks and projects for improving cybersecurity in different IT and business areas Developing and deploying information security controls, policies and procedures Monitor for attacks, intrusions, unauthorised and illegal activities; investigate security events and incident response Research emerging cybersecurity threats and methods to manage them Deploy new security systems or upgrade the existing ones Develop and deploy the security baselines for IT systems and applications Give advice and guidance to staff on secure usage of company IT systems and applications Conducting security reviews and audits of existing and newly acquired systems; providing recommendations on improvements to internal controls and cybersecurity Coordinate the preparation of company subsidiaries and relevant policies and systems to meet the requirements for information security certifications and regulations, including ISO 27001, ISO 27017, NIS2, GDPR Arrange the development and delivery of cybersecurity awareness training for colleagues Keep up to date with the latest cybersecurity and information technology developments Prepare reports for technical, non-technical personnel and stakeholders

Bachelor's or MBA degree in computer science or related field Acquired certifications in Cybersecurity and other IT areas (such as SSCP, CompTIA Security+ , CEH) will be considered as advantage Solid cybersecurity, Infrastructure, support or helpdesk background experience Good knowledge and experience with various information and cybersecurity technologies search as networks, operating systems, software, hardware, firewalls, cloud computing, endpoint protection, EDR, IDS/IPS, SIEM, etc. Experience and knowledge in Microsoft Azure, Entra ID, Windows Server, Active Directory, Office 365, Microsoft Defender, Microsoft Purview are required. Possessing any Microsoft Security certifications, search as AZ-500 or SC 100-400, is preferred Understanding the cybersecurity risks related to various technologies and ways to manage them Problem solving and analytical skills to identify and assess threats and patterns Teamworking skills Knowledge and experience in deployment of enterprise cybersecurity according to requirements of ISO 27001, ISO 27017, NIST SP800-53, NIST Cybersecurity Framework or SOC2 will be considered as advantage

Diverse and varied tasks in an oriented company with an open, informal culture Hybrid working and flexible working hours Wellpass membership Capital-forming benefits Comprehensive onboarding and a motivated, professional team Needs-based internal and external training and development opportunities Employee discounts and special conditions with various cooperation partners (e.g. e-bike leasing)