IS Technology Consultant Cissp

FUNCTION DESCRIPTION:

Participate in the further development of the teams that have a leading role to adequate risk management of the electronic channels. High level of expertise in risk management of electronic channels such as Internet Banking, IDEAL and Access Online, which are strategically important for the bank. Investigate alerts attack patterns and ensure that defences are adjusted in such a way that losses can be avoided. Participate in the roll-out of response and prevention best practices to teams in other countries. The IS Technology Consultant is a leading role in preventing losses on the strategic direct channels of the bank. The stakes are high and can amount to millions of euros. The Technology Consultant is an important factor in making sure that the net loss is controlled. The purpose of the job is to optimize risk management procedures, IT systems and processes so that the client is optimally protected against unwanted risks. Job deliverables representatives of all major countries, major IT vendors and ITIL incident management representatives, maintain the GCIRT terms of reference and test and implement a GCIRT process) Cybercrime response and prevention (o.a. Participate in the further development of the cybercrime response and prevention team of the AAB) Electronic channels risk management (a.o. Participate in the further development of the Technology Threat Analysis an Countermeasures Team, which focuses on the direct channels such as the ATM and POS network and telephony banking) Controlled incident response procedures (Leads the Global Incident Response Team to mitigate incidents that can inflictdamage) Development of risk controls within the electronic channels (Analysis and development of effective and efficient controls, on fraud detection and other risk mitigating)

- HBO+, CISSP or similar IS professional qualification Experience
- 6+ years experience in information security
- 4+ years experience in technology security
- Track record of creating and reviewing IS risk documents and technology reports
- Track record of representing the ISO agenda or Information Security requirements with other groups
- Track record of delivering against ambitious timelines
- Track record of delivering during crisis situations
- Experience with rules and regulations (eg SOXA, WBP, ROB, BASEL, CAAML)
- Experience working with individuals and teams from diverse cultures and backgrounds
- Experience in the banking and/or financial services sector Business/Commercial Knowledge
- Capability to map IS (technology or risk) issues into business priorities
- Advanced knowledge of information security concepts, procedures and best practices
- Expert knowledge and hands-on experience with application and platform security
- In depth knowledge of malware and cybercrime attacks
- Solid understanding of ITIL
- Solid understanding of application development and maintenance processes
- Knowledge of AAB business strategy and strategic issues
- Understanding of IT strategy and objectives
- Knowledge of AAB's business, products and key clients
- Solid understanding of standard business processes
- Broad understanding of the banking sector and current trends
- Understanding of risk management, controls, BCP/DR and QA processes

SKILLS - MUST HAVES

- CISSP
- 6+ years experience in information security
- 4+ years experience in technology security
- Track record of creating and reviewing IS risk documents and technology report
- Track record of representing the ISO agenda or Information Security requirements with other groups

REQUIRED LANGUAGES FOR THIS ROLE

- English