Description
IT Auditor (ISO/IEC 27005)
The contract is with a Consultancy to be on an assignment at a large European site in Stockholm as follows:-
Tasks and Deliverables by the Consultant
The consultant shall be requested to perform various tasks related to the IT security matters on projects, products, applications and services developed and maintained in organisation.
The primary task of the consultant will be to perform an ISO/IEC 27005 security risk assessment for ECDC information systems.
Additional secondary tasks are:
- Advise System Owners, IT service providers and Project managers on the IT security approach, methodology and requirements;
- Advise on the design of security controls and perform compliance reviews;
- Provide advice and information on information systems security matters;
- Collaborate with the Data Protection Officer and the Internal control coordinator;
- Assist the security incident management.
Expected deliverables are:
- Information Security Risk Assessment;
- Provided advices;
- Updated existing documents i in the area of information security.
Required expertise of the consultant
An IT Auditor with expertise in IT security risk assessments ISO/IEC 27005 according to the specifications of the Framework contract is envisaged. CISA, CIS LA or CIS RM certification is expected.
Evaluation criteria's
The proposed consultants meeting the eligible criteria will be evaluated according to the criteria mentioned here under: Overall experience in Information Security, Risk Management and Business Continuity Management; Experience in the execution of ISO/IEC 27005 security risk assessment; Excellent knowledge and understanding of other Information Security Standards and Business Continuity Standards (ISO 27000, ITIL SCM, etc); Project management experience.