Description
NK072 IT Senior Scripter: Banking, Brussels
Background
The successful candidate will join the IT Security Management - Security Projects and Services team. The main responsibility for the IT Security Management team is to ensure that the technology infrastructure at the bank protects corporate assets from unauthorised access, modification, disclosure and destruction. ITSM SPS is the service owner of the logical security domain and infrastructure through the implementation of security services and infrastructure, risk assessments, requirements setting, and active participation in the project delivery life cycle, as well as ensuring adequate processes and procedures for the security administration teams.
As part of the ITSM SPS team, the main responsibilities for the candidate are:
-Advice technical team on the control design, implementation and processes necessary to ensure and protect information systems assets. Perform risk assessments and define application and infrastructure-related security requirements for business and IT projects. Advises on high level security design of new infrastructures, systems and/or applications to ensure secure operation within the environment.
- Perform security validation to ensure effective implementation of security controls.
- Defines, implement and ensures the proper functioning of security trust services within his/her security domain in line with IT security policies. Recommends and advises on new or improved security services to IT security Management
- Review the secure design and implementation of the infrastructure and network infrastructure eg Virtualisation, Anti-malware, system protection, DMZ infrastructure, MPLS and VOIP infrastructure, 802.1x.
- Ensure the adequate functioning of security services in the infrastructure protection and network security domain.
- Produces documented security services, technical standards or principles.
- Act as security subject matter expert in a security domain and be the security point of contact for the business and project teams.
Requirements
The successful candidate must be a service oriented, organised and independent security professional with at least 5 years+ solid experience in the security domain.
The candidate must be a team player who communicates in an open, respectful and constructive way with his/her customers and peers, both verbally and in writing. The candidate will take ownership and ensure that organisational quality standards are met.
The candidate must be a very good communicator in English, both verbal and written, and able to discuss and defend the security interests with individuals and groups of senior business people as well as deep technical IT experts.
The candidate must have proven experience in security risk assessments, development of functional security requirements, process design and management reporting. Experience in security design, architecture and project management is a strong advantage.
Technical skills of the candidate must include any combination of:
1) Sound security design principles, based on confidentiality, integrity and availability requirements and other ISO27002 security principles;
2) Networking & Firewalls: several years of experience in building up sufficient background knowledge with regard to network principles and protocols used in WAN and LAN's, DMZ, Internet security, Remote access, network segregation
3) Senior level knowledge and experience with network security technologies including Firewalls, web application Firewalls, IDS/IPS systems, VPN, security assessments, and centralized logging. Understanding of industry best practices as it relates to security on network architecture.
4) Unix and Windows System security and assurance - Application security knowledge is a plus;
5) Authentication and access controls Security services (Authentication and authorisation schemes, Role-based access controls, Single sign-on, PKI...);
Preferred professional certifications are CISSP, GIAC, TOGAF, ISO 27001 LA/LI. Product network security certification eg Windows, Unix, Cisco or Checkpoint Certified Security Professional (CCSP, CCNP) are an asset.
Ref:NK072
Language: English
Duration: 6 months
Rate: euros per day