Information Security Specialist

Gazelle Global; Amstelveen; On-site; EUR 60,000 - 90,000; Full time

Job summary

Gazelle Global is seeking an Information Security Expert for a 12+ month engagement in the Netherlands. The role focuses on governance of IT vendor relationships, risk assessments, and translating technical risk into business impact.

You will work with stakeholders to address security challenges, emphasizing supply chain security and TPSRM practices. A hands-on, autonomous professional is preferred for delivery.

Qualifications

• Degree in HBO or university required.
• Experience in conducting information security risk assessments.
• Knowledge of security processes, architectures, networks and vulnerability management.
• Strong stakeholder management skills.
• Hands-on, self-organised, capable of delivering results.
• Experience with ServiceNow TPRM module is a plus.

Responsibilities

• Govern and manage IT vendor relationships with focus on security aspects of contracts.
• Execute vendor security risk assessments and translate results for stakeholders.
• Ensure information security risks are identified and managed throughout vendor relationships.

Skills

Stakeholder management

Translate technical risks to business

Execution power

Self-organised

Security risk assessment experience

TPSRM and supply chain security

Education

HBO or University degree

Tools

ServiceNow TPRM

Job description

As a preferred supplier to one of our biggest financial organisations, I am seeking for a Information Security Expert for a 12+months contract in Netherlands.

Responsibilities:

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations;
• Execute Vendor Security Risk Assessments and perform follow up actions. Focus on the risks that matter, translate them into the business context and help your stakeholders to address security challenges;
• Ensure that information security risks are identified and managed effectively throughout all the stages of the relationship with external vendors;

Experience:

• HBO or University degree
• Knowledge and experience with setting up projects & deliverables within supply chain security / TPSRM
• Experience in executing information security risk assessments;
• Knowledgeable on one or more areas such as security processes, technology architectures, network security, application security and vulnerability management;
• Excellent in stakeholder management.
• Hands-on, self-organised, willing to finish and deliver (execution power)
• A strong ability to translate technical risks into business risks and vice versa;
• Service oriented professional, you enjoy taking on an internal consultancy role
• Experience with the ServiceNow TPRM module is a huge pré.