Risk Officer (Security)

Levy Professionals; Amstelveen; On-site; EUR 80,000 - 110,000; Full time

Job summary

Levy Professionals is seeking a Security Risk Officer to coordinate security monitoring across multiple stakeholders and ensure that gaps and deviations are managed through to resolution. You will lead the integration of security logs for SOC monitoring, oversee logging standards and IAM concepts, and onboard logs into SIEM platforms while maintaining dashboards.

The role requires strong risk governance, excellent stakeholder management, and familiarity with Azure and security frameworks such as

Qualifications

• Experience in security monitoring, IT risk or security governance.
• Knowledge of SIEM and security monitoring solutions (e.g., Azure Sentinel, Splunk, QRadar).
• Understanding security logging standards and frameworks.
• Strong IAM concepts familiarity.

Responsibilities

• Coordinate security monitoring across multiple stakeholders and manage gaps to resolution.
• Lead integration of security logs for SOC monitoring and onboarding to SIEM platforms.
• Maintain dashboards and management reports on log onboarding and coverage.
• Advise on regulatory and control assurance activities.
• Act as liaison between Security Monitoring, IT, Architecture and product teams.

Skills

Security monitoring

Risk management

Governance

Stakeholder management

IAM concepts

SOC processes

Azure

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

About the role

As a Security Risk Officer, you are responsible for coordinating security monitoring requirements across multiple stakeholders and ensuring that identified gaps, risks and deviations are effectively managed through to resolution.

You will:

• Lead the integration of security logs for Security Operations Centre (SOC) monitoring.
• Ensure application and product teams understand and comply with security logging requirements and standards.
• Identify and assess gaps in security logging and monitoring coverage.
• Manage risks, issues, deviations, waivers and compensating controls related to security monitoring.
• Assess the business and security impact of missing monitoring coverage.
• Coordinate remediation activities and track progress through to completion.
• Identify and validate relevant security events, including authentication, authorisation and audit logs.
• Facilitate the onboarding of security logs into SIEM and security monitoring platforms.
• Track onboarding progress, resolve blockers and coordinate stakeholders to address technical challenges.
• Act as the primary liaison between Security Monitoring, SOC/Cyber Defence, Application Owners, Product Owners, Risk & Control and Architecture teams.
• Maintain dashboards and metrics covering log onboarding, monitoring coverage, risks, deviations and adherence to logging standards.
• Prepare management reporting highlighting challenges, risks and areas of exposure.
• Support audit, regulatory and control assurance activities.
• Help embed security monitoring requirements into application lifecycle and delivery processes.

Who are you?

You are a security professional who combines security monitoring knowledge with risk management, governance and strong stakeholder management skills. You are comfortable working across technical and non-technical teams and can translate security requirements into practical operational outcomes.

Experience

• Experience in security monitoring, information security, IT risk or security governance.
• Knowledge of SIEM and security monitoring solutions, such as Microsoft Sentinel, Splunk or QRadar.
• Understanding of security logging standards and frameworks.
• Good understanding of Identity & Access Management (IAM) concepts.
• Knowledge of threat detection and SOC processes.
• Experience with IT risk, issue and control management.
• Experience managing security risks, deviations, waivers and compensating controls.
• Experience coordinating stakeholders across Security, IT, Architecture, Product and Application teams.
• Knowledge of cloud environments, preferably Microsoft Azure.
• Familiarity with regulatory and security frameworks such as DORA, NIST, ISO 27001 and CIS Controls.