Description
My client is currently looking for a number of IT security Designers for a large scale project. The successful candidate will join the IT Security Management - Security Projects and Services team. The main responsibility for the IT Security Management team is to ensure that the technology infrastructure at our client protects corporate assets from unauthorised access, modification, disclosure and destruction.
The main responsibilities for the candidate are;
- Advise technical team on the control design, implementation and processes necessary to ensure and protect information systems assets. Perform risk assessments and define application and infrastructure-related security requirements for business and IT projects. Advises on high level security design of new infrastructures, systems and/or applications to ensure secure operation within the environment.
- Perform security validation to ensure effective implementation of security controls.
- Defines, implement and ensures the proper functioning of security trust services within his security domain in line with IT security policies. Recommends and advises on new or improved security services to IT security Management
- Review the secure design and implementation of the infrastructure and network infrastructure eg Virtualisation, Anti-malware, system protection.
- Ensure the adequate functioning of security services in the infrastructure protection and network security domain.
- Produces documented security services, technical standards or principles.
- Act as security subject matter expert in a security domain and be the security point of contact for the business and project teams.
Your Profile:
The successful candidate must be a service oriented, organised and independent security professional with solid experience in the security domain or in the IT infrastructure solution architecture.
The candidate must be a team player who communicates in an open, respectful and constructive way with his customers and peers, both verbally and in writing. The candidate will take ownership and ensure that organisational quality standards are met.
The candidate must be a very good communicator in English, both verbal and written, and able to discuss and defend the security interests with individuals and groups of senior business people as well as deep technical IT experts.
The candidate must have proven experience in security risk assessments, development of functional security requirements, process design and management reporting. Experience in security design, architecture and project management is a strong advantage.
1) Sound security design principles, based on confidentiality, integrity and availability requirements and other ISO27002 security principles;
2) Networking & Firewalls: several years of experience in building up sufficient background knowledge with regard to network principles and protocols.
3) Senior level knowledge and experience with network security technologies including Firewalls, web application Firewalls, IDS/IPS systems, VPN, security assessments, and centralized logging. Understanding of industry best practices as it relates to security on network architecture.
4) Unix and Windows System security and assurance - Application security knowledge is a plus;
5) Authentication and access controls Security services (Authentication and authorisation schemes, Role-based access controls, Single sign-on, PKI...);
Preferred professional certifications are CISSP, GIAC, TOGAF, ISO 27001 LA/LI. Product network security certification eg Windows, Unix, Cisco or Checkpoint Certified Security Professional (CCSP, CCNP) are an asset.