Information Security Professional

About the Role

As the Security Lead for Assurance, Alerting, and Incident Management, you will play a critical role in safeguarding Caldic's infrastructure and data. You will be responsible for conducting security assurance activities, managing security incidents, advising on security controls during Technology change initiatives, and ensuring effective risk mitigation. This role requires cross-functional collaboration with internal teams and external suppliers to ensure compliance with regulatory requirements while protecting sensitive data.

Key Responsibilities

1. Security Assurance, Reporting, and Remediation

• Conduct regular security assurance assessments to evaluate the effectiveness of security controls regionally and globally.
• Identify and prioritize security risks, develop remediation plans with control owners, and track progress.

• Prepare detailed reports for internal stakeholders on security vulnerabilities, risks, and mitigation efforts, including metrics and KPIs.

• Collaborate with cross-functional teams to implement security policies, standards, and procedures.
• Perform follow-up reviews to validate remediation actions and ensure ongoing compliance.

2. Security Alerting and Incident Management

• Lead response to security alerts and incidents in collaboration with the external SOC provider and internal teams, ensuring effective containment, eradication, recovery, and post-incident analysis.
• Develop and maintain incident response plans, playbooks, and procedures.
• Investigate security incidents to determine root causes, assess impacts, and implement corrective actions.
• Coordinate incident response activities with internal and external stakeholders for timely communication and resolution.
• Conduct post-incident reviews to enhance incident response capabilities.

3. Change Management

• Assess potential security risks associated with proposed Technology changes and recommend mitigation strategies.
• Ensure changes are recorded, tested, and authorized in compliance with change management policies.
• Conduct post-change reviews to evaluate impacts on the security posture and recommend further actions as needed.

Job Requirements

• Minimum 5 years of experience in security assurance, incident management, and change assurance.
• Bachelor’s degree in Computer Science, Information Security, or related field.
• Professional certifications (e.g., CISSP, CISM) preferred.

Skills and Competencies

• Strong understanding of security assurance controls, risk assessment, and compliance standards.
• Experience with change management and ITIL practices.
• Proficiency in security incident management and root cause analysis.
• Excellent communication skills with the ability to convey security issues to non-technical stakeholders.
• Ability to work under pressure and manage multiple incidents simultaneously.
• Analytical mindset with strong attention to detail and a methodical approach to Incident Management.

Additional Requirements:

• Willingness to be on-call for security incidents and work extended hours as needed.
• Ad-hoc/irregular Global Travel (Europe, LATAM, APAC and NA)

About Caldic

At Caldic, we’re a global leader in distribution solutions, serving diverse markets across the world. Joining us means becoming part of an entrepreneurial, collaborative, and innovation-driven team.

We offer:

• Global opportunities with rapid career growth and development
• An inclusive, diverse, and dynamic work environment
• The chance to shape the future of specialty ingredient solutions across industries like food, pharma, personal care, and more

We operate in 43 countries around the world. Our innovative solutions are tailored to meet the needs of industries such as food, pharma, personal care, and industrial markets, ensuring sustainable success for all stakeholders. To learn more, visit: www.caldic.com

Ready to Join Us?

If you're ready to take your career to the next level and join a global leader, apply now at Caldic!

Equal Opportunity Employer

Caldic celebrates diversity and is committed to fostering an inclusive work environment. We do not discriminate on the basis of race, religion, gender, or any other characteristic.