IT and Cyber Security - Brussels, België - HNM solutions

HNM solutions

Geverifieerd bedrijf

Brussels, België

1 week geleden

Geplaatst door:

Sophie Dubois

beBee Recruiter

Beschrijving

Description:

You perform security risk quality assurance from the creation to the closure of the risk.
- you deliver advice and support on risk management to internal customers (IT and Business) : this means:

Accompany and challenge IT risk assessments performed by the Entities.
Propose or validate measures to mitigate risks derived from assessments, security scans and penetration tests, defects from IT and Cyber controls plans, recommendations from 2nd and 3rd lines of defence, etc.
Create detailed or synthetic risk reports, in line with BNP Paribas Group and IT and Cyber Risk Management best practices.
Increase risk control maturity by providing a valuable follow up and reporting.

- you report risks and overall risk posture to Information Security, IT or Business Management

Identify and propose transversal risk mitigating actions
Create risk dashboards and reports for a management audience, in line with the risk appetite for the company.
Create onepagers and risk reports for a management audience.

- you build a customer relationship as the Single Point Of Contact for the risk management services you deliver.
- you contribute to improve the risk management methods and tools taking into account your field experience as well as best practices coming from the BNP Paribas Group or other sources like regulators, Basel II, CobIT, ISO27000/
- you contribute to writing procedures and processes supporting the risk management activities outlined above, for both an expert and non-expert audience.
- you are the single point of contact for security matters related to the Information asset and the CIAT rating of our assets, whilst providing business support, maintaining and updating procedures and tooling, and integrating the security asset management in the overall asset management processes of the bank.

Required experience / knowledge:

Professional experience in information security (5+ years)
Experience in project management, process design and improvement
Experience in Data protection, Business continuity, Access management
Experience in IT and Cyber Assessments on assets, processes or Thirdparties
Experience in delivering presentations and training

Mandatory:

Significant experience in operational/IT and security risks management (+5 years).

Knowledge of control frameworks and audit methodologies.
Significant experience in working with cloud services (SaaS, HSP, AWS, Microsoft 365))
Knowledge of software development security best practices, network/OS security, PAM.
Experience in IT release management, change management, incident management, testing
Experience in vulnerability management, patching management, hardening, Identity & Access Management.

Preferable:

Experience with RSA Archer tool or Service Now.

Business experience:

Mandatory:

Knowledge of Information Security and Risk Management frameworks (ISO27001, SOC, NIST, OWASP, etc.)
Professional experience in Financial Services; used to work in large companies.

Soft Skills:

High performer
Autonomy, commitment and perseverance in personal organization.
Quick selfstarter, proactive attitude, team player.
Resultsoriented, responsible for his/her tasks, resourceful.
Excellent English writing skills.
Good communication and influencing skills.
Good analytical and synthesis skills, ability to produce structured and concise documents, be precise and methodological.
Ability to work in a dynamic and multicultural environment.
Accurate & control minded, but flexible.
Ability to capture and adapt to stakeholder expectations while respecting processes in place.
Ability to mentor/coach people.

Dienstverband:
Voltijds

Extralegale voordelen: