← 返回岗位列表葡萄牙IT/互联网fulltime

高级信息安全工程师

雇主

Five9

地点

远程 · Remote · 葡萄牙

待遇

面议

工作模式

远程

截止日期

1月4日

🤖 AI 简历匹配评估

检测你的简历与该岗位的匹配度,免费

免费评估

岗位摘要

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an…

岗位职责

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide.
Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves.
We are looking for a Senior Information Security Engineer to join our growing Security Risk Management team. The Security Risk Management team aims to expand beyond traditional risk management; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Five9 and our customers.
As a key contributor to the program the role supports the day-to-day execution of risk identification, assessment, treatment, and reporting across Five9's infrastructure, services, and acquisitions. You'll work directly with engineering, operations, and business stakeholders to surface security risks, drive them toward resolution, and maintain a clear picture of Five9's risk posture for leadership.
Key Responsibilities:
Identify, document, and assess security risks across Five9's environment, including production infrastructure, cloud services, corporate systems, and acquired platforms
Maintain the Security Risk Register in Jira, ensuring risks are accurately categorized, assigned to appropriate owners, and tracked through their lifecycle
Engage with service owners, engineering leads, and operations teams to establish risk ownership and drive remediation or mitigation plans
Facilitate the risk acceptance process, including preparing risk acceptance documentation and coordinating approval with appropriate stakeholders
Develop and deliver risk reporting for security leadership and executive audiences, including dashboards and metrics that communicate risk posture clearly
Collaborate with compliance, vulnerability management, and other Information Security functions to ensure risk findings are incorporated into the broader security program
Research and apply risk management frameworks and methodologies to continuously improve program maturity
Contribute to the development of risk management policies, procedures, and playbooks
Requirements:
3+ years of experience in information security, with at least 2 years focused on security risk management or GRC
Demonstrated experience maintaining a security risk register and driving risk treatment decisions with cross-functional stakeholders
Strong understanding of risk assessment methodologies (qualitative and quantitative)
Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, or SOC 2
Ability to communicate security risks clearly to both technical and non-technical audiences
Experience with Jira or similar tools for tracking and managing risk workflows
Self-directed and comfortable engaging directly with service owners, engineers, and leadership to resolve ambiguity around risk ownership
Preferred Skills:
Experience with cloud environments (GCP, AWS, or Azure), particularly assessing risks related to cloud architecture and services
Familiarity with vulnerability management programs and how they feed into risk management
Experience supporting compliance audits or regulatory assessments (ISO 27001, SOC 2, PCI DSS)
Experience building or contributing to security metrics, KPI dashboards, or executive reporting
Prior work in a SaaS or contact center / communications platform environment
Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working knowledge of Python
Professional certification in Information Security or Risk Management (such as CISSP, CISM, CISA, CRISC, etc.)
Workplace location: This role is fully remote for candidates who reside outside Porto, Maia, Matosinhos, Gondomar, Valongo e Vila Nova de Gaia. Candidates who reside within those municipalities would be required to work in-office 3 days a week.
Benefits:
Five9 Shares
Bonus Scheme
10% Flex Benefit
Meal Allowance
Medical Insurance
Life Insurance
25 day Annual Leave + Public Holidays
Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better we are. Five9 is an equal opportunity employer.
Five9 is committed to providing reasonable accommodations for qualified individuals with disabilities throughout the application and interview process. If you need assistance or an accommodation due to a disability, please contact us at accommodations@five9.com to request an accommodation. Requests will be handled confidentially and in accordance with applicable law.
View our privacy policy, including our privacy notice to California residents here:
Note: Five9 will never request that an applicant send money as a prerequisite for commencing employment with Five9.

申请条件

- 经验:高级信息安全工程师级别,具备安全风险管理相关工作经验
- 技术能力:熟悉生产基础设施、云服务、企业系统和收购平台的安全风险识别、评估与处置
- 工具能力:熟练使用 Jira 维护安全风险登记册
- 风险管理能力:能够推动风险生命周期管理,包括风险接受流程和缓解计划
- 沟通协作能力:能够与工程、运营和业务利益相关方直接协作,推动风险解决
- 报告能力:能够为安全领导层和高管受众开发风险报告、仪表盘和指标
- 自动化与工程思维:适应工程驱动的项目,能够设计、自动化和扩展安全控制、工作流和工具
- 团队文化契合:认同团队优先文化,支持多样性和包容性环境

雇主简介

Five9 is a leading provider of cloud contact center software, delivering cloud innovation to customers worldwide.

对这个岗位感兴趣?

该岗位通过项目服务流程申请,顾问可为您介绍项目详情与申请条件

咨询不收取任何费用,项目顾问将与您联系

申请海外岗位,英文简历符合当地格式规范吗?

AI 自动评估你与该岗位的匹配度,3 分钟出结果

免费评估简历匹配度

数据来源:Jobicy

岗位信息来源于公开渠道,版权归原作者所有