Description
Digital Security Expert
Job description
- Throughout the project life cycle, you are responsible for performing the following activities:
- Understand the business & IT context and guide the project stakeholders in classifying key data and system assets.
- Identify Digital Security Risks through the review of the architecture and through threat modelling. In some cases, a logical & conceptual architecture will need to be made by yourself in order to be able to perform a Digital Security Risk review.
- Advise IT asset - and Business Owner stakeholders on the Digital Security Risk posture and the possible remediations
- Propose a set of Security Controls and requirements
- Design the Security Controls and provide guidance to the IT Project shareholders for the design and building. Strive for standardization and a maximum reuse of existing security services.
- Help in defining the security requirements for a sourcing track and assist in the Digital Security evaluation.
- Define the Digital Security Test plan by formalizing the threat & test cases to test systems are securely built as designed.
Your profile and qualifications
- To succeed in this role, we believe that you need to be a pro-active people-centric individual. You have the capability to switch between different levels of abstraction easily. Your style of communication is engaging and educational. You are comfortable giving expert advice to various levels in the organization and you actively seek input from your expert peers.
- You are familiar with security frameworks such as SABSA, NIST, ISO27K, CIS20, ISACA, etc. and have multiple years of experience in evaluating IT architectures from a Digital Security and Compliance angle.
- You are familiar with Hybrid Cloud architectures and the security thereof, service-oriented IT operating models, IT Application Security, Identity & Access Management and Infrastructure security.
- You have worked previously in large organizations in an open, multi-cultural environment.
- Start with 6 months - outlook at a long-term contract
Required skills
- Architecture
- ISO27000
- security frameworks
- Security
- Digital Security
- Digital Security Risk
- Digital Transformation
- Project Manager
- Hybrid Cloud architectures
- Cloud
- CIS20
- NIST
- IT Transformation
- Defining Key Data
- Cyber Security
- SABSA
- IT Security
- Analysis
- ISACA
- CIS