Payment Security Consultant

Information security (PKI and Cryptography consultant)

Our client is a major player of the payment industry and is seeking candidates to join our Information Security team in South Belgium, Belgium as it is researching and developing products and services to enable consumers to securely, efficiently, and intelligently conduct transactions.

Job Description

The scope of the job is to define completely the applicability of PKI and how to implement it within the company.
Define the criteria and conditions required for using a PKI for securing an application
Define security requirements of PKI implementation and define the criteria and conditions for reusing asymmetric keys and certificates for different purposes
Assess PKI-enabled products and protocols and derive implementation guidelines
Assess existing PKI-enabled applications of the company and correct/adapt the existing practices whenever deemed necessary
Define methods/processes for controlling PKI implementations on the company network

Profile:

Can you demonstrate a high level of expertise within infrastructure engineering and information security disciplines?
Can you proactively identify risks that impact thepayment industry?
Can you demonstrate ability to articulate strategies and define solutions in appropriate terms while helping to leading implementation of infrastructure within the payment environment?
Leverage security experience and knowledge within the infrastructure and application arena to cultivate and maintain effective working relationships with a variety of internal stakeholders, including business owners, end-users, customers, project managers, engineers, and senior management..
Demonstrates the ability to articulate and communicate effectively to diverse audiences and properly translates security and risk management terminology into business terms, and recommends alternative solutions to these stakeholders.
Strong verbal and written communication skills
Strong understanding of Information Security, Authentication and Data Privacy within the domain of Infrastructure and applications including relevant practical experience
Demonstrated experience designing Secure multi-domain Internet facing applications
Knowledge of the security architecture of web based network environments and secure communication between environments
Knowledge and technical security experience in Cryptography, including several of the following: PKI, Digital Certificates, SSL, Hashing, Encryption techniques, etc
Experienced in infrastructure security architecture concepts, design, implementation along with networking

Education and experience requirements

Undergraduate degree necessary, preferably in computer science; master degree preferred
Five to seven years of experience or equivalent background
Theoretical knowledge and understanding of applied cryptography and PKI principles
Solid practical experience in implementation of PKI in protocols (eg SSL, SSH) and products (eg IBM WebSphere, IBM WebSeal, Apache...).
Professional experience in working with HSMs, cryptographic tools and utilities.
Professional experience in writing technical and security requirements, in defining configuration parameters, in writing installation and operation procedures and in documenting issues and associated resolution plan

Skills

Good English verbal and written communication skills
Ability to assess the operational impact of any change
Rigorous and striving for quality. Preciseness of technical documentation
Pro-active reporting of accomplishments and issues (eg anticipating delays)
Autonomous and ability to communicate clearly and effectively
Capacity to deduce the essential aspects for getting started and formulate them in a concise way for decision-makers
Ability to separate the key things and what is less important in order to fix priorities

Where: South Brussels

When: 2 years contract to start in January 2017