Third Party IT Security - Brussels, België - Base 3

Base 3

Geverifieerd bedrijf

Brussels, België

1 week geleden

Geplaatst door:

Sophie Dubois

beBee Recruiter

Beschrijving

Role Description
The role will be responsible for execution of risk-based IT Security controls for Third Parties.

Key responsibilities:
Customer and Third-Party Assurance Lifecycle

Due Diligence risk profiling, onboarding, recertification
Contract Management ensuring that the security expectations included in the contract are proportionate to the risk profiling
Exit Management performance of necessary security checks at the end of a contractual agreement with a Third Party

Key responsibilities:
Ecosystem Third Party Security Monitoring & Alerting

Continuous, automated monitoring of Third Party related Cyber Threats with the potential to impact the company. Monitoring is executed with the help Cyber Threat intelligence tools. The capability enables the company to quickly act, limiting the risk of contagion or severity of impacts.
Continuous monitoring, alerting and incident management of external connections based on several distinct usecases

Core Skills

Knowledge of the customer, thirdparty and connectivity ecosystems
Knowledge of security risk management
Knowledge of control frameworks, eg, ISO 27000, NIST, CIS18, COBIT
Knowledge of logging, monitoring and alerting is an advantage
Knowledge of similar ecosystem frameworks, eg, SWIFT CSP is an advantage
Knowledge of financial markets, FMIs and CSD operations is an advantage
Experience with supplier and supply chain due diligence framework, procedures, data gathering risk and control assessment.
Experience with contract review of information security schedules and terms
Knowledge of logging, monitoring and alerting is an advantage
Experience with ServiceNow GRC is an advantage
IT Security Certification such as CISSP, CSSLP, CCSP, CISM, CISMP, GCIH, CEH, etc. is an advantage.