What we look for:
You own, further develop, and maintain OMMAX’s Information Security Management System (ISMS), ensuring ongoing ISO 27001 compliance and successful recertification cycles.
You strengthen the company’s IT security posture across Microsoft 365 and Azure, including Defender, Intune, Purview, identity & access management, and conditional access policies.
You manage key security processes such as risk assessments, patch and vulnerability management, incident response, and continuous security monitoring.
You develop, update, and communicate IT security policies, standards, guidelines, and documentation in close alignment with legal and compliance teams.
You conduct vendor, SaaS, and tool security assessments to ensure appropriate safeguards across our software and cloud ecosystem.
You plan, coordinate, and deliver security awareness initiatives, including training programs, internal campaigns, and phishing simulations.
You serve as the internal point of contact for all security-related questions, incidents, and escalations, ensuring structured communication and remediation.
You contribute actively to daily IT operations, supporting user and device lifecycle management, endpoint administration, and troubleshooting escalations.
You support IT procurement, vendor management, and SaaS lifecycle management in coordination with the internal IT team.
You collaborate closely with IT team members to guide, standardize, and further develop operational and security best practices.
You continuously identify opportunities to improve IT processes, service quality, system reliability, and overall security maturity.