IT Security Specialist - Risk, IAM & ISO 27001 Architect

Levy Global; Utrecht; On-site; EUR 70,000 - 110,000; Full time

Job summary

Levy Global is seeking an experienced IT Security Specialist to bridge engineering and security risk within a large financial environment in Utrecht. You will focus on technical security risk management, assessing systems, reviewing designs, and embedding controls across IT infrastructure.

You will collaborate with engineering, Risk & Security professionals, and stakeholders to ensure security requirements are understood and implemented pragmatically, while maintaining secure design and IAM

Qualifications

• Experience in IT Security and risk assessments.
• Knowledge of ISO 27001/27002 controls.
• Experience with threat modelling and secure design.

Responsibilities

• Conducting technical security risk assessments and deep-dive security reviews
• Assessing systems against security control baselines aligned with ISO 27001/27002
• Facilitating threat modelling and security risk assessments
• Reviewing security documentation, architecture and technical designs
• Translating and embedding security controls and best practices into IT infrastructure
• Providing practical advice on secure design and implementation
• Developing and reviewing Logical Access Models and Authorization Matrices
• Supporting application security testing for critical systems
• Executing and reviewing controls within the Risk Control Framework
• Supporting security change management and operational security incidents
• Monitoring changes to security standards and assessing their impact
• Improving security visibility through metrics and dashboards

Skills

IT Security

Security Risk

Security Architecture

IAM

Threat Modelling

ISO 27001

SDLC

Stakeholder Mgmt

Secure Design

Communication

Education

Bachelor's degree in CS/IT/Cyber Security

Job description

Levy Global is seeking an experienced IT Security Specialist to bridge engineering and security risk within a large financial environment in Utrecht. You will focus on technical security risk management, assessing systems, reviewing designs, and embedding controls across IT infrastructure.

You will collaborate with engineering, Risk & Security professionals, and stakeholders to ensure security requirements are understood and implemented pragmatically, while maintaining secure design and IAM