Information System Architect - Cyber Security - Banking, Brussels

JOB TITLE: INFORMATION SYSTEM ARCHITECT - CYBER SECURITY - BANKING, BRUSSELS

BACKGROUND: Brussels based international bank looking for an Information System Architect with a focus on Cyber Security (specifically security impacts on the application & data layer, not on the infrastructure aspects). Analyse IT asset management practices, the application development processes & guidelines, as well as the resulting adaptations of some applications. With over 800 applications, (in-house and off-the shelf packages, on-site and cloud-based), the environment is heterogeneous by nature covering Mainframe and Distributed technologies. Such a varied IT landscape offers a most interesting and challenging role.

TASKS:

You will be part of the Information System Architecture team and as security subject matter expert in the team, you will play a key role in:
assessing the impacts of the cyber security requirements on the application
defining fit-for-purpose responses;
transitioning these solutions to the application development project delivery departments.
The role focuses on the security impacts on the application
drive the impact analysis at the level of applications
Define an optimal roll-out plan to cover all the impacted applications assets,
Develop guidelines, standards and integration patterns (with the security components) to ease the adoption of the cyber-related solutions at the bank.

SKILLS/EXPERIENCE
You have a proven experience in large-size application development of highly resilient systems, and more specifically in dealing with cyber security impacts on large IT driven organisation. You also have a clear understanding of an heterogeneous application landscape, design, development and operations.
ESSENTIAL:
Multi-Factor Authentication concepts, solutions, application impacts, roll-out strategies;
Network Zoning concepts, solutions, application impacts, roll-out strategies;
Internet Access Segregation concepts, solutions, application impacts;
Access Management (role-based, privileged) concepts, solutions, application impacts, roll-out strategies;
Application Protection (through WAF) concepts, solutions, application impacts;
Secure Development Lifecycle concept

Some knowledge of: IBM Mainframe (DB2, Cobol, PLI, CICS), HP Tandem and distributed (Linux, Windows).

Desirable:

Cloud Security Strategy concepts, solutions, application impacts;
IT asset management

Language: Essential: Fluent English; Desirable: basic French or Dutch.