IT Security Analyst/Architect, Bank, Brussels

Background:

You will join the IT Security Management (ITSM) team whose remit is  to ensure that the technology infrastructure at the bank protects corporate assets from unauthorised access, modification, disclosure and destruction. ITSM is the service owner of the logical security domain and infrastructure through the implementation of security services and infrastructure, risk assessments, requirement setting and active participation in the project delivery life cycle, as well as ensuring adequate processes and procedures for the security administration teams.
I am seeking a security analyst/architect to join the ITSM team.

TASKS:

- Perform risk based assessments and define application and infrastructure-related security requirements for business and IT projects. This includes detailed reviews of business initiatives, project proposals, technical design and project life cycle documentation,
- Definition of security requirements in contractual obligations for outsourced and SAAS services;
- Follow different projects and initiatives to ensure consistent and adequate implementation and testing of the security requirements,
- Act as security architect or subject matter expert and be the IT security point of contact for the business and project teams.

SKILLS/EXPERIENCE:

Minimum 5 years experience with in IT security.

You will be service oriented, organised and a good communicator, not afraid to discuss and defend the ITSM's interests with colleagues in the business or technical side of the bank (eg. with subject matter experts).

You must have proven experience in security risk assessments, development of functional security requirements, process design and management reporting.

Experience in security design, architecture and project management is essential.

You have a solid understanding of security concepts, practices and frameworks. eg. risk, threat and vulnerability management, metrics based management reporting and dashboards, compliance & governance (ISAE3402, ISO2700x, etc) as well as a good understanding of distributed infrastructure security concepts eg. Application and web security, system and network security principles, PKI, IAM, Federation and trust models, SAAS.
Candidates with certification of CISSP, CISM, CISA will have an advantage.

Language: English is essential.