Security Risk Senior Consultant - inglés alto

Kapres Technology; Córdoba; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

A leading technology company is seeking a seasoned Security Risk Senior Consultant to enhance its risk assessment framework in 2024. The role demands a strong focus on delivering security risk assessments and engaging with stakeholders through workshops and live sessions.

Formación

• Proven experience in delivering security risk frameworks.
• Expertise in applying security management systems within risk management.
• Ability to conduct assurance testing and its relevance to risk assessments.

Responsabilidades

• Delivering an asset-based risk assessment framework for the company.
• Conducting workshops and live sharing sessions with 150 participants.
• Updating existing instructions for risk assessment practices.

Conocimientos

Expertise of DORA & Regulations

Risk & Control environment

Asset-based risk assessment frameworks

Security Risk Framework

Risk reduction strategies

IT GRC

Vulnerability Management

KRI & KPI expertise

Descripción del empleo

We are looking for the service of an external Security Risk Senior Consultant. The mission is not about coordinating other team members but rather a senior doer, responsible for delivery of the service allocated engagement. Advanced PPT presentation expertise and basic XLS expertise are necessary. Transversal team playing is required.

The objective of the mission is to roll out in 2024 an asset-based risk assessment framework at scale in the Company. This includes the update of our existing instructions.

This includes coordination, planning preparation, workshops with entities, and organizing live sharing sessions (150 participants).

The service must have a level of expertise in applying best practices from an operational standpoint.

We already have an Application Infosec Risk Assessment (AISRA) that we’ll augment with PSS security assessments, seeking convergence.

We’ll also ensure that the AI and Healthcare requirements are included, but we already have the supporting libraries.

Required Expertise :

• Expertise of DORA & Regulations
• Extended expertise of Risk & Control environment with a focus on security
• Proven design and delivery of asset-based risk assessment frameworks
• Extended expertise of Security Risk Framework & Risk Assessments
• Expertise in designing and evaluating risk reduction in a pragmatic and operational fashion for security
• Expertise of IT GRC, ERM, CMDB, Vulnerability Management
• Expertise of what is an SMS for Security and the link with other capabilities starting with Risk Management
• Expertise of KRI, KPI and how they support decision making
• Expertise of assurance testing and how this feeds risk assessment approaches
• Expertise of Risk Management as a 2nd Line and how security operates within that model

J-18808-Ljbffr