Security Risk Assessors

Gazelle Global; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Job summary

Gazelle Global seeks a seasoned Security Risk Assessor for a position in Amsterdam, Netherlands. You will identify security risks across applications and infrastructure, focusing on crown jewels and advising secure design.

You will conduct in-depth risk assessments, interview SMEs, facilitate threat modelling, and present findings to stakeholders while supporting self-attestation security checks and security controls across AWS, SaaS and on‑prem environments.

Qualifications

• 7+ years of IT security experience in security risk domains.
• Professional IS qualifications such as CISSP, CCSP, CEH, CISA, CISM and CCSK.
• Broad knowledge of IT and security capabilities and processes.

Responsibilities

• Conduct in-depth security risk assessments on IT systems and applications.
• Data collection via interviews with subject matter experts.
• Facilitate threat modelling sessions.
• Present findings to relevant stakeholders.
• Support application owners with their self-attestation security checks
• Perform threat intel based security assessments, covering applications, infrastructure, SaaS and AWS.

Skills

IT security experience

Stakeholder management

English communication

Education

CISSP

CCSP

CEH

CISA

CISM

CCSK

Job description

As a preferred supplier to one of our biggest Financial Client, I am seeking for a Security Risk Assessors for a position in Amsterdam, Netherlands. As an information security risk assessor, you play a crucial role in securing our application & infrastructure IT landscape by identifying security risks. You focus on our crown jewels and ensure that security is constantly improving. You contribute to the safety of the bank by securing individual applications, but also by looking at the bigger picture. You advise and work together with our talented development teams to ensure information security.

Responsibilities:

• Conduct In dept security risk assessment on IT systems and applications.
• Data collection via interviews with subject matter experts.
• Facilitate threat modelling sessions.
• Present findings to relevant stakeholders.
• Support application owners with their self-attestation security checks
• Perform threat intel based security assessments, these are in-depth (very technical) security reviews on applications, infrastructure, SaaS and AWS.

You have:

• 7+ years of experience in the IT security / application / infrastructure security field
• Information Security (IS) professional qualifications such as CISSP, CCSP, CEH, CISA, CISM and CCSK
• Broad knowledge of different IT and security capabilities and processes
• Development life-cycle knowledge, e.g. secure SDLC and security by design
• Experience with performing security assessments and with translating generic security requirements to specific cases
• Experience with IS documentation, -report writing, reviewing and consulting
• Stakeholder management skills, especially in a multi-cultural and international environment
• Strong communication skills both verbally and in writing in English.