IT Risk/Security Expert.
ING Bank
(Banks and financial services, >10.000 employees)
Skills
- www.omnisecure.nl
- Translating world class ISO 27001 standard into company policy, guidelines and procedures
- Using vsRisk to systematically identify, classify and quantify information security risks
- Assist management to identify risk appetite in order to decide reducing, mitigating or accepting risk
- Develop and describe an ISMS (processes and documents)
- Training and educating Information Security to increase risk awareness
- Increasing business continuity and enhancing corporate reliability image
- Preparing the company for independent ISO-27001 certification
Project history
06/2019
-
Present
Manage first line risk of SaaS applications. Maintaining a low risk within risk appetite by managing vendors and their negotiated IT risk controls. Perform audits and spot checks. Use of ING risk tool. Implement ING Policies and standards. Design IT Security addendum for new contracts. Propose risk acceptances in case of tolerable deviations.
Local Availability
Open to travel worldwide
