Description
ICT Security Process Expert ProfileContext
My client has adentify a need to improve its ICT security around the subjects of vulnerabilities, anti-malware and patching.
Within this context the need for an external resource has been identified to work on the tasks of revising and improving the Security Patching policy and process.
Mission Description
The mission shall be comprised of the following practical tasks & deliverables...
Familarisation of the Fluxys ICT environment (organisation, stakeholders, processes, etc.)
Review and revision of the current ICT Security patching Policy concerning vulnerabilities, anti-malware, and patching (VAP).
Creation of a practical process which responds to the defined ICT Security Policy.
Definition of reports which will be needed to ensure the correct operation of the ICT vulnerability, anti-virus and security patching process.
Creation of the needed process documentation.
Validate the updated security policy and the newly created VAP process with the Security Officer and affected technical stakeholders.
Follow-up of the implementation of the process with the relevant ICT operational and application teams.
Required Competences
The person apt to perform this should be competent and experienced in the domain of business process development and the general domain of ICT security.
The required competences, in descending order of importance, are as follows...
Business process definition (based on COBIT framework)
Documentation & reporting definitions
Business and communication skills in order to implicate the impacted business and technical stakeholders correctly.
ICT vulnerability, anti-malware and security patching subjects.
ICT Security within the following domains:-
Architectural
Systems: Windows (PC's & Servers), HP Unix & Linux servers, standalone & virtualised
Storage: SAN & LAN based storage
Network: Cisco
DB: Oracle & MS SQL
Applications:
Microsoft Office & typical enterprise applications
Industrial control systems
Microsoft Framework developed (.Net) applications
Languages
The consultant must be able to communicate, both orally and written, using English, with either Dutch and/or French as additional communication languages.
Given more than one proposed candidate with similar level of competences (see above), a tri-lingual consultant will be preferred over a bi- or mono-lingual consultant.
Timing
The start date of this mission is as soon as possible after a period of evaluation and procurement negotiation, typically 15 working days after the publication of this profile.
It is foreseen that this mission could take a maximum of 10 man-days.
The regime may be part time (minimum 2 days/week).
Offer:
Daily rate based on your experience.
If you are interested working on this exciting project please send me your cv at or call me on .