Cybersecurity Metrics and Controls Specialist

Founded in 1999 in Vienna, the Qualysoft Group is a manufacturer-independent IT consulting and services company, which successfully provides support for its international customers with the aim of boosting their competitiveness and economic efficiency through innovative IT solutions.

Its focus is on financial services providers, telecommunications companies, the automotive industry and energy service providers. Over 400 employees in 6 subsidiaries work together to ensure state of the art solutions for our clients.

We are looking for new colleagues in Qualysoft teams for diverse projects providing continuous learning opportunities. Our common goal is to provide honesty, development and a stable background while getting to know the latest technologies. We are waiting for your application for the position below!

About the Role:

The Continuous Controls Monitoring (CCM) team is part of the Technology Controls Group within the Technology and Operational Risk organization. The CCM program provides a structured and consistent process to enable near real-time monitoring of Technology Policy control implementations across the firm, identify control failures, and respond effectively.

Technology controls safeguard the confidentiality, integrity, and availability of the firm’s data, infrastructure, and systems in both on-premises and cloud environments. CCM delivers continuous visibility into control weaknesses while demonstrating compliance with laws, rules, and regulations.

As a member of the Metric Design & Architecture team, you will focus on designing and defining metrics that quantify the effectiveness and efficiency of Technology controls. You will work closely with stakeholders, control implementers, product owners, architects, and engineers to ensure metrics are measurable, accurate, and actionable.

Responsibilities: :
• Establish and document Control/Risk metric definitions by engaging with stakeholders, analyzing processes, and assessing data.
• Collaborate with the Technology Policy team to align metric requirements with policy design and updates.
• Partner with metric consumers to design a reporting framework that meets business and regulatory requirements.
• Work closely with the data acquisition and tooling team to ensure successful metric implementation.

Requirements: :
• 10+ years of experience in information security and/or information technology.
• 5+ years of hands-on experience with technology or cybersecurity control implementations.
• Proven ability to define metrics/Key Control Indicators (KCIs) for control effectiveness.
• Strong business acumen and a strategic mindset.
• Experience working directly with customers, clients, or business stakeholders.
• Excellent interpersonal and communication skills, with the ability to engage effectively across all levels of the organization.
• Ability to manage expectations and perform under pressure with tight deadlines.
• Strong analytical and decision-making skills, leveraging both quantitative and qualitative data.

Advantages: :
• Knowledge of multiple domains of Technology controls and Cybersecurity.
• Familiarity with public cloud technologies.
• Understanding of security concepts and tools in the areas of:
• Identity & Authentication
• Data Security
• System and Network Security
• Application Security
• Knowledge of security logging, monitoring, and incident response.
• Relevant cybersecurity certifications (preferred).

Why we think you will love working here:

With us you count as a person, our doors are always open.
We live the Qualysoft Team Spirit and stand for transparency!

Fresh wind and new ideas are welcome, because standstill is a foreign word at Qualysoft.