Description
Morson International working with a global consultancy who are looking for a IT Security Expert to join their team in Luxembourg. This is initially a 6 month contract with the chance of extension - it will be a long term contract.
DESCRIPTION
- Propose and implement an EPPO IT Security methodology, applicable for internal projects and interconnections with external parties, based on existing EC security rules or well-known security frameworks as CIS or NIST
- Define general security requirements as part of the design of the new EPPO IT infrastructure, and EPPO CMS, and propose adequate security solutions
- Perform 'Business Impact Assessments', in collaboration with the relevant stakeholders, in particular the business owners and system owners and define the IT security needs which guarantee the required security of the IT systems
- Active role in the Member State connection project, gathering business requirements from the counter parties and elaborating the security requirements and measures to implement secure connections, in line with internal and national standards
- Coordinate the implementation of the secure connections, participating in drafting the test plan and performing testing, namely security testing, reporting and auditing
- Define the required protocols and procedures to maintain and manage the secure connections
- Define the security requirements and propose measures and solutions to implement security by design for automated data exchanges
- Identify applicable security hardening guidelines specific to various technologies and adjust them to EPPO context and needs in collaboration with other technical experts implement the security controls
- Describe and implement security specifications for various IT systems - infrastructure, network, OS, Middleware, Front End and Back End applications, on premises or cloud based applications - in close collaboration with the EPPO solution architect
- Contribute to the development and documentation of security procedures, and other documents related to security in projects and future operations
- Propose and implement the tools for performing automated code reviews and security tests - audits of applications prior to their deployment in production
- Manage and operate all IT security aspects related to implementation of EPPO infrastructure, EPPO CMS, member states connections, new building, EPPO cloud infrastructure.
QUALIFICATIONS
- Knowledge of security principles, internationally recognised standards and implementing security management methodologies and tools
- Knowledge in telecommunication, datacenter and network security
- Knowledge of risk assessment methodologies
- Knowledge of ITIL best practices in ICT operations
- Knowledge of ICT infrastructure and systems
- Knowledge of security monitoring systems
- Capability to write clear and structured technical documents
- Capability to speak to and interface with business and technical audiences
- Capability of working in an international/multicultural environment (language and communications skills)
- Collaborative approach with hands on attitude.
- Master degree in Computer Science or equivalent field
REQUIRED SPECIFIC EXPERIENCE
- Proven knowledge or certification on security standards ISO27001 level Practitioner or Expert
- Certifications in security areas as CISSP, CISSP-ISSAP, CISSP-ISSEP, CISM, CEH, ECSS, s-EHP, S-CITSO or similar
- Network design security solutions/technologies, including security zones, secure connections, VPN, IPS, IDS, network and application Firewall
- Data security in virtualised environment, with encryption technologies and other security controls
- Server hardening and monitoring - VMs, OS (Windows 2012, 2019, RedHat Linux), AD Policy groups, Windows 10, SQL hardening
- Security best practices for IBM components (Case Manager, BAW, Filenet) and Java based applications.
For further information please contact Paul Harvey at Morson International.