Information Technology Security Specialist

Levy Global; Utrecht; On-site; EUR 70,000 - 110,000; Full time

Job summary

Levy Global is seeking an experienced IT Security Specialist to bridge engineering and security risk within a large financial environment in Utrecht. You will focus on technical security risk management, assessing systems, reviewing designs, and embedding controls across IT infrastructure.

You will collaborate with engineering, Risk & Security professionals, and stakeholders to ensure security requirements are understood and implemented pragmatically, while maintaining secure design and IAM

Qualifications

• Experience in IT Security and risk assessments.
• Knowledge of ISO 27001/27002 controls.
• Experience with threat modelling and secure design.

Responsibilities

• Conducting technical security risk assessments and deep-dive security reviews
• Assessing systems against security control baselines aligned with ISO 27001/27002
• Facilitating threat modelling and security risk assessments
• Reviewing security documentation, architecture and technical designs
• Translating and embedding security controls and best practices into IT infrastructure
• Providing practical advice on secure design and implementation
• Developing and reviewing Logical Access Models and Authorization Matrices
• Supporting application security testing for critical systems
• Executing and reviewing controls within the Risk Control Framework
• Supporting security change management and operational security incidents
• Monitoring changes to security standards and assessing their impact
• Improving security visibility through metrics and dashboards

Skills

IT Security

Security Risk

Security Architecture

IAM

Threat Modelling

ISO 27001

SDLC

Stakeholder Mgmt

Secure Design

Communication

Education

Bachelor's degree in CS/IT/Cyber Security

Job description

IT Security Specialist | Security Risk | ISO 27001 | Utrecht

Are you an experienced IT Security professional who can bridge the gap between technical engineering teams and security risk? For a leading financial organisation in Utrecht, we are looking for an IT Security Specialistto strengthen a complex enterprise technology environment. You’ll work across technical security risk, security architecture, IAM and secure design, helping engineering teams translate security requirements into practical solutions.

About the role

As an IT Security Specialist, you will be part of a technology risk and security environment supporting engineering teams across critical IT infrastructure and systems.

Your focus will be on technical security risk management: assessing systems against security control baselines, reviewing technical designs and architecture, facilitating threat modelling and ensuring security controls are effectively embedded into IT solutions.

You’ll work closely with engineering teams, Risk & Security professionals and other stakeholders to ensure security requirements are understood and implemented pragmatically.

Key responsibilities include:

• Conducting technical security risk assessments and deep-dive security reviews


• Assessing systems against security control baselines aligned with ISO 27001/27002


• Facilitating threat modelling and security risk assessments


• Reviewing security documentation, architecture and technical designs


• Translating and embedding security controls and best practices into IT infrastructure


• Providing practical advice on secure design and implementation


• Developing and reviewing Logical Access Models and Authorization Matrices


• Supporting application security testing for critical systems


• Executing and reviewing controls within the Risk Control Framework


• Supporting security change management and operational security incidents


• Monitoring changes to security standards and assessing their impact


• Improving security visibility through metrics and dashboards

The role gives you the opportunity to work in a large-scale, technically complex financial environment where security, engineering and risk come together.

About you

• Professional experience within IT Security, Information Security, IT infrastructure/support or systems development


• Strong knowledge of ISO 27001/27002 and security control frameworks


• Experience with technical security risk assessments


• Understanding of technical security architecture and secure design


• Knowledge of IAM, logical access controls and authorization models


• Understanding of the Software Development Lifecycle (SDLC)


• Strong stakeholder-management and communication skills


• Able to translate security policies and controls into pragmatic technical solutions


• Proactive and comfortable working independently within defined security and risk frameworks


• Bachelor’s degree in Computer Science, IT, Cyber Security or a related discipline, or equivalent professional experience


• Fluent professional English

Experience within financial services, Agile/DevOps, software development, data engineering or database environments is considered an advantage.

Certifications such as CISSP, CCSP, CEH, CISM or CISA are also desirable.

About Levy Global

Levy Global is a leading international consulting and recruitment organisation specialising in connecting highly skilled professionals with organisations across technology and business transformation.

With an extensive network across the Netherlands and internationally, we support professionals in finding challenging projects where they can make an impact while helping our clients access the specialist expertise they need.