We create an atmosphere of amazing team collaboration. Want in? Apply now!

Join our international work environment!

Zalaris

PRIVACY NOTICELast updated: 01.01.20231. IntroductionZalaris ASA ("Zalaris" or "we") has made this internal privacy notice ("Privacy Notice") to inform our employees, consultants and temporary employees of how we process personal data about you, why we process your personal data (purpose) and the legal basis for our processing of your personal data. In addition, this Privacy Notice describes the rights you have under the General Data Protection Regulation (Regulation (EU) 2016/679 – or the "GDPR").Zalaris is the data controller for the processing of your personal data. As the data controller, Zalaris is responsible for ensuring compliance with the GDPR and other applicable data protection legislation (e.g. the Norwegian Data Protection Act). Please note that temporary employees and consultants may have to deal with several data controllers (such as the company from which the employee/consultant is hired).2. Personal data and processing in generalPersonal data means any information relating to an identified or identifiable natural person (a "data subject"). Examples of personal data is your name, phone number, salary information, working conditions and e-mail address.By "processing" of personal data, we mean any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. All processing of personal data is, in general, subject to data protection legislation.3. Whose personal data we processWe collect and process the personal data described in Section 4 below about the following categories of persons:• Permanent employees;• Temporary employees; and• External Consultants.The term "employee" (and conditions of employment) will be used as a collective term for these groups of persons in this Privacy Notice.4. What personal data we process in connection with your employmentZalaris ASA will mainly collect personal data directly from you. When collecting information from third parties (for example from the tax authorities) you will be notified, unless the collection is imposed by law, notification is impossible or disproportionately difficult, or it is clear that you already know the information the notice will contain.We process the following personal data of our employees:• Contact details: full name, private e-mail address, postal address and phone number, workplace/location, phone number of workplace, workplace e-mail address etc.• General HR information: Employer, date of employment, position, employee group (department), working time, employment agreement and conditions of employment (such as salary information, increments and deductions etc.), pension, bank account details, business trips, travel expenses, supplementary information for "A-message", use of company car, absence, performance data, information from engagement pulse surveys, information on warnings and corrections, personal identification number, gender, marital status, citizenship and information obtained when we hired you (e.g. CV, diplomas, statements from reference persons, as well as personality skill tests where relevant).• Information regarding the security of our premises etc.: Use of access cards (including pin code, where and when card is used), as well as video surveillance.• Information regarding our delivery of IT-equipment, internet, applications etc.: Access logs, security logs, username, password, profile picture, and other user data.• Sensitive HR information: Data concerning health (absence distributed on category such as parental leave, sick leave etc., absence follow-up, illness during pregnancy when having a reimbursement scheme, chronic disease on children when having a reimbursement scheme, accommodation measures established at the workplace etc.)• Contact details of relatives: Full name, your relation to the relatives, postal address and phone number.• Other data: Personal data contained in various documents etc. (such as minutes of meetings, contracts you have signed, any personal data included in incoming inquiries from you).• If you are a temporary employee we may have to process additional categories of personal data, such as your connection to the company we have hired you from and information about this company.Please note that we will not process all of the above categories of personal data in all cases. The extent of personal data processed will depend on the individual condition of the employment. For instance, it may be necessary to process personal data concerning health in order to provide you with accommodating measures at your workplace in accordance with your needs. This list is not exhaustive. If you want further information about the processing of your personal data, please contact us through the contact information provided in Section 11 below.5. The purposes of our processing of personal data and the applicable legal basesThe purpose of Zalaris ASA's processing of personal data is primarily ensuring that we take care of you as an employee and the fulfillment of the obligations we have undertaken to implement the contract with you. In addition, we process personal data in order to offer our employees an opportunity to improve their skills, to improve Zalaris, to manage our work resources, and for compliance with the legal obligations to which Zalaris (as an employer) is subject (such as the local Accounting Act).Contact details and general HR information are processed to protect various legitimate interests (see section above), fulfil legal obligations (such as your right to take holidays, making salary and pension payments etc.) and to fulfil the employment contract with you.The legal basis for our processing of your personal data obtained in connection with the security of our premises, is our legitimate interest in ensuring that our employees are safe and that no unauthorized persons may enter our premises. Furthermore, we have a legitimate interest in processing your personal data in order to provide you with IT-equipment, internet, systems and applications.The legal basis on which we base the processing of sensitive HR information varies. We process data concerning health in connection with parental leave, sick leave, sick leave follow-up and accommodations measures at the workplace etc. in order to comply with legal obligations and for the purposes of carrying out obligations and exercising specific rights in the field of employment and social security and social protection law.We process contact details of relatives based on our legitimate interest in being able to contact relatives in case you are exposed to an accident, acute illness or similar at the workplace.We publish the name, picture and information about qualifications and experience of some of our employees at our websites. We may also share such information with our customers, service providers and investors. The legal basis for this processing of personal data is our legitimate interest in promoting our employees. If you do not wish your picture to be shared with third parties, you may exclude yourself by sending us a message (see the contact information provided in Section 11 below).We process personal data contained in other documents etc. either based on a legitimate interest relating to the company's need to control the company's daily and long term operations, to answer you inquiries, or to comply with a legal obligation.6. Disclosure of personal dataPersonal data regarding you will be disclosed to the following third parties:• Public authorities: If we are required to disclose personal data under applicable law or under a court order to public authorities (for instance to the tax authorities), we will do so. Such personal data may include, but is not limited to, salary information bonuses, perks and other contributions.• IT and other service providers (data processors): We make use of several service providers who may process your personal data on behalf of Zalaris as data processors. By way of example, Visolit is one of our IT suppliers and Cut-e is the provider of assessment tests.• Disclosure to third parties through our website, pitches etc.: We may publish and disclose pictures, contact details and information about your qualifications as part of our marketing and promotion of our employees, for instance in connection with pitches to our customers and investors, or through our website.• Other: It may also be necessary to disclose your personal data to pension and insurance companies, our financial and legal advisors, as well as to companies (and their advisors) who consider investing in Zalaris. All such advisors are subject to confidentiality obligations and will only process your personal data for specific purposes.Zalaris has entered into data processing agreements with all of our data processors to ensure that their processing of the personal data is in accordance with the GDPR and the applicable data protection legislation and our requirements for data processing.If Zalaris wish to circulate information from engagement pulse surveys to interested stakeholders (such as for instance advertisers or quasi-governmental organizations), Group HR is responsible for anonymizing any personal data before distribution of information. No personal data will be revealed when the sample group consist of less than four employees. If the survey variables could reveal an employee’s identity, then that data will be deleted from the sample before any data results are published. These limitations have been set to secure the anonymity of the workforce, but also to secure the visibility and voice of smaller departments.We may transfer personal data to countries outside the EU/EEA area. Employee data management related to new hire, changes, terminations, payroll, travel etc. for Zalaris employees are handled by the HR team in India. We make sure that your personal data are adequately protected, for instance by use of Standard Contractual Clauses ("SCC") prepared by the EU Commission.7. Retention periodWe will delete or anonymize personal data about you when the purpose of the specific processing is fulfilled, unless the personal data is or may be kept beyond this as a consequence of a legal requirement.In practice, your personal data will be retained during the entire period of your employment. Some personal data will be deleted after a specified period (such as warnings and written corrections), while other documents will be retained also after the end of your employment (such as your employment contract, documents which you have produced during your employment, travel expenses and other refunds).Zalaris has established archiving and deletion rules. If you have any questions about the retention periods of your personal data, please contact the HR department.8. SecurityAs the data controller of your personal data, Zalaris has the overall responsibility for the security and confidentiality of the personal data we process. This entails that we have to implement appropriate technical and organisational measures to ensure an adequate level of protection relating to our processing of personal data. We have, inter alia, implemented access control mechanisms, which means that access to your personal data is provided on a need-to-know basis.9. Your rights when we process personal data about youYou have the following rights in connection with our processing of your personal data:• Access. You may contact us if you wish to obtain confirmation about whether or not we are processing your personal data, and access to and further information regarding our processing of your personal data.• Rectification. You may request us to rectify and/or complete inaccurate or incomplete personal data.• Erasure. You may request us to erase your personal data. We will respect and comply with your request unless we, among other things, are prohibited from deleting your personal data under mandatory retention requirements, or the personal data is necessary for the establishment, exercise or defense of legal claims.• Restriction of processing. You may also request the restriction of our processing of your personal data in accordance with the GDPR. If the processing has been restricted, such personal data will, with the exception of storage, only be processed with your consent or for the exercise or defense of legal claims or for the protection of the rights of another person or for reasons of important public interest.• Right to object. You are entitled to object to certain processing activities, including, for example, processing of your personal data for marketing purposes. You are furthermore on grounds relating to your particular situation (for example, a specific need for protection of your identity), entitled to object to processing of personal data based on legitimate interests, which we will comply with, unless there exists compelling legitimate grounds for our processing which override your interest, or if our processing is necessary for the establishment, exercise or defense of legal claims.• Data portability. If we process your personal data based on consent or based on our performance of a contract, and the processing is carried out by automated means, you may request us to transfer the personal data to you or another controller, in a structured, commonly used and machine-readable format.Please note that the above rights are not absolute, and there may be exceptions or restrictions to the exercise of the rights. If you have any questions or wish to invoke one of your rights, you may contact us through the contact information provided in Section 11.In order to exercise your rights, you can register a ticket to Internal HR in Zalaris Support/Helpdesk in the portal. We will respond to your inquiry as soon as possible and no later than 30 days.Further information can be found under Zalaris Library.10. ChangesIn the event of a change of our processing activities, or changes to the GDPR or the applicable data protection legislation, it may be that the information you are given here must be updated or changed. Updated information will always be available in Zalaris Operating Procedures (ZOP) and in Zalaris Library.11. Contact informationIf you have any questions regarding this Privacy Notice, including which personal data we process about you, or if you wish to invoke your rights, please contact the HR department via <a target="_blank" rel="noopener noreferrer nofollow" class="editor-link" href="mailto:Internal-HR@zalaris.com">Internal-HR@zalaris.com</a> or register a ticket at our Helpdesk in the portal to Internal HR.The contact information for Zalaris ASA is:Address: PO Box 1053 Hoff, 0218 Oslo, NorwayEmail: <a target="_blank" rel="noopener noreferrer nofollow" class="editor-link" href="mailto:info@zalaris.com">info@zalaris.com</a>Telephone: +47 40 00 33 00Organisation number: 981 953 134 MVA12. ComplaintsIf you think that we are in breach of the data protection legislation, or if you are unsatisfied with our processing of your request, you may file a complaint about Zalaris ASA's processing of personal data that concerns you may be directed to your local Data Protection Authority or directly to the Norwegian Data Protection Authority. However, we kindly ask you to contact us first so that we may explain any misunderstandings.

Reference No: 1611Office Type: Office  <div><div><div><h2>Position Summary</h2></div><div>Analyst part of Zalaris CSOC is responsible for monitoring, logging, detecting, and isolating incidents and the management of the organizations secured infrastructure.</div></div><div><div><h2>Your Responsibilities</h2></div><div>Cyber Security Operations Center: (24*7 Monthly Rotation)<ul><li>Continuous Security Information &amp; Events Management (SIEM) monitoring the alert queue/ log using ELK Stack.</li><li>Application security testing (SAST) with coding knowledge is an added advantage.</li><li>Monitors health of Security Information &amp; Events Management (SIEM) security sensors and endpoints in collects data and context necessary to initiate L2 work.</li><li>Being part of maintaining the Security Information &amp; Events Management (SIEM) solution components for high availability.</li><li>Triages security alerts Configure asset/log connectors and collectors and fine tune their volume and logging levels.</li><li>Generate incident and statistical reports and provide lessons learnt analysis. </li><li>Accountable for carrying out CSOC activities and documenting as per defined SOPs and policies/procedures.</li><li>Threat monitoring and intelligence. </li><li>Vulnerability assessment and monitoring, Penetration Testing.</li><li>Monitor latest information security industry threats and support the organization.</li><li>Support the organization for ISMS/ ISO 27001 whenever needed.</li><li>IT Security, Networking &amp; System Administration certifications is a plus (CEH, Security+, CCNA, MCSE, Linux etc.)</li><li>Knowledge on various IT security standards, frameworks is an advantage.</li></ul> </div></div><div><div><h2>Skills</h2></div><div><ul><li>SOC</li><li>Splunk</li><li>SIEM</li><li>CEH certified</li><li>Highly Energetic and Quick Learner</li><li>Analytical skills, out-of-box thinking</li><li>Positive attitude</li></ul></div></div><div><div><h2>Education &amp; experience</h2></div><div><ul><li>Graduation in Computer Studies</li></ul></div></div><div><div><h2>We offer you</h2></div><div><ul><li>International working environment</li><li>Friendly and supporting colleagues</li><li>Modern and cozy office premises</li><li>Competitive base salary</li><li>Several additional benefits, like:<ul><li>Health insurance</li><li>Team building events</li><li>Coffee, tea and other supplies in the office</li><li>Opportunity to flex work hours and home office</li></ul></li></ul></div></div></div> Apply now and join #teamZalaris!