Junior Information Security Expert

Experis (Austria); Netherlands; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Holiday days

Travel allowance

E-learning portal

Medical expenses

Job summary

Experis (Austria) zoekt een Information Security Expert voor het Vendor Security Services-team (CISO). Je beheert beveiligingsrelaties met leveranciers en coördineert risicobeoordelingen, rapportage en verbeteringen in samenwerking met juridisch, compliance en inkoop.

Je vertaalt technische risico's naar bedrijfsrisico's en presenteert bevindingen aan senior management. De rol vereist een hands-on, pragmatische aanpak en eigenaarschap van leveringsresultaten binnen een agile omgeving.

Qualifications

• HBO/Bachelor or university level of working and thinking.
• At least 1-3 years of relevant experience in information security.
• Experience in a complex environment with multiple stakeholders.
• Strong ability to translate technical risks into business risks.
• Experience communicating to senior management.
• Pragmatic, result-driven, analytical and good communication skills.
• Energetic and works well in an agile environment.
• Ownership of own and team delivery.

Responsibilities

• Beheer en governance van IT-leveranciersrelaties met focus op beveiliging.
• Voer Vendor Security Risk Assessments uit en volg acties op.
• Zorg dat informatiebeveiligingsrisico's beheersbaar blijven tijdens alle fasen van leveranciersrelaties.
• Beoordeel toepasselijkheid en kwaliteit van assurance-rapporten van derden.
• Zorg voor continue verbetering van rapportage en dienstverlening door derden.
• Beheer het IT-beveiligingsgedeelte van contracten met leveranciers en werk samen met juridische, compliance en inkoop.
• Signaleer verbeteringen in werkwijze en draag bij aan uitstekende dienstverlening.
• Blijf op de hoogte van opkomende cybersecurity trends en deel kennis met collega's.

Job description

Dit ga je doen

• Govern and manage IT vendor relationships in terms of performance regarding the security aspects of the underlying contractual obligations;
• Execute Vendor Security Risk Assessments and perform follow up actions. Focus on the risks that matter, translate them into the business context and help your stakeholders to address security challenges;
• Ensure that information security risks are identified and managed effectively throughout all the stages of the relationship with external vendors;
• Review the applicability and the quality level of assurance reports issued by the third parties;
• Ensure continuous improvements are achieved both in the quality of reporting and service provided by the third party;
• Manage the IT security related part of a contract with the third party provider. Work together with 2nd line functions such as legal, compliance, procurement and other internal parties on contractual changes;
• Help solving security-related questions, take initiative and elevate in time if needed;
• Signal improvements related to the way of working inside the team and contribute to improving the excellence of our service offering;
• Stay up-to-date with emerging cybersecurity trends and the latest developments in the field of technology, information risk and threats, actively share this knowledge with your colleagues and help to determine if/when to integrate them into the assessment program.

You feel at home in a technical environment. You have shown in the past that you are able to learn quickly and apply the learned skills immediately. You like to work together with other specialists and you know from experience teamwork sets changes in motion. And that's what you want: getting things done!

Hier ga je werken

You will join the Vendor Security Services (VSS) team, part of the Corporate Information Security Office (CISO) department, within the Operations and Intelligence (O&I) grid. CISO employs approximately 400 colleagues who are responsible for the bank's information security globally, across all subsidiaries and countries. The O&I department is responsible for the security operations activities of the bank, and, your team continuously provide visibility into the security posture of the vendors of the bank. The VSS team members are experienced in information security and vendor relations. The team is diverse in both nationalities and professional background, which makes it a great place to work and develop yourself.

As an Information Security Expert you will be responsible to manage, monitor and report on the performance and the status of the security posture of the strategic partners both on operational and tactical levels.

Dit neem je mee

• HBO/Bachelor or university level of working and thinking;
• At least 1-3 years of relevant experience in the area of information security;
• Experience in a complex environment (internal and external stakeholders, different time zones, different cultures);
• Strong ability to translate technical risks into business risks and vice versa;
• Experience communicating to senior management;
• You are pragmatic, result-driven, analytical and possesses good verbal, written communication and social skills;
• You are energetic and like to work in an agile environment;
• You take ownership of your own and team's delivery and have a proactive attitude.

Dit krijg je

• 25 holiday days + 0.5 bonus day per quarter if you stayed fit and healthy (read: did not call in sick);
• Travel allowance 21 cents/km or total public transport costs;
• E-learning portal with (almost) every IT training and education you can imagine;
• 50 euros for medical expenses (you can count gross on top of your salary).