Cyber Security Risk Analyst

Euroclear; Kraków; Hybrid; PLN 180,000 - 300,000; Full time

Job summary

Euroclear is hiring cyber and information security experts to strengthen the Brussels office. The role focuses on risk assessments, security requirements, design validation, and compliance activities across IT projects and infrastructure.

You will work with identity and access management, PKI, network security, data protection, and application security, contributing to secure coding practices and CI/CD automation.

Qualifications

• University degree in Computer Science, Engineering, or similar degree.
• IT-security professional with solid experience in the infrastructure security domain or in the IT application security domain.
• Solid knowledge of PowerPoint, Visio, Excel, and Word.
• Experience translating business requirements into technical solutions.
• Strong organizational, planning and time management skills.
• Analytical and critical thinking abilities.
• Ability to operate in an international, multicultural environment.
• Fluent in English.

Responsibilities

• Define and advise on the design, implementation, and test processes necessary to protect information system assets.
• Perform risk assessments and translate security architecture and policies into security requirements.
• Contribute to architectural design and validate it against security requirements.
• Define security testing requirements and penetration test scope; support testing squads and approve reports.
• Define, implement, and ensure proper functioning of security services in line with IT security policies.
• Recommend and advise on new or improved security services to management.
• Produce documented security services, standards, or principles.
• Act as a security SME within a domain and be the contact for stakeholders, auditors, and engineers.

Skills

Security risk assessments

Functional security requirements

Process design

Management reporting

Identity and access management

PKI

Network security

Data protection

Application security

OWASP guidelines

Code scanning tools

CI/CD security automation

Secure access management

Cryptography

Web application firewalls

Endpoint security

Cloud IAAS/PAAS/SAAS

Security certifications (CISSP/GIAC/SB

Education

University degree in Computer Science, Engineering, or similar degree

Tools

IDaaS

Security technologies stack

Job description

Job Description

Euroclear is a global critical financial infrastructure company. Security is at the core of the company’s services, firmly embedded in their management systems and processes. Our Tribe provides impact analysis, security risk assessment, security requirements, design validation for all IT projects in Euroclear, regular security assessments of Euroclear applications and the underlying infrastructure. We also support Euroclear’s compliance activities by reviewing and publishing secure configuration baselines and by organising the Security Exception Review Board. Finally, we provide consultancy for anyone in Euroclear for any IT security related question.

Euroclear is a global critical financial infrastructure company. Security is at the core of the company’s services, firmly embedded in their management systems and processes. Our Tribe provides impact analysis, security risk assessment, security requirements, design validation for all IT projects in Euroclear, regular security assessments of Euroclear applications and the underlying infrastructure. We also support Euroclear’s compliance activities by reviewing and publishing secure configuration baselines and by organising the Security Exception Review Board. Finally, we provide consultancy for anyone in Euroclear for any IT security related question.

Required Technical and Professional Expertise

We Are Looking For Cyber & Information Security Experts To Strengthen Our Squad In Our Brussels Office With Experience In One Or More Of The Following Areas

• Proven experience in security risk assessments, development of functional security requirements, process design and management reporting.
• Familiarity with industry best practices in key security domains such as identity and access management, PKI, network security, data protection.
• Application security knowledge with a good understanding of software development and testing, OWASP (Open Web Application Security Project) guidelines, code scanning tools, security and compliance automation using a CI/CD pipeline.
• Knowledge of and experience with security technologies including IDAAS (Identity as a service) and identity management platforms, Secure access management and federation services, PKI and cryptographic solutions, web application firewalls, endpoint security.
• Knowledge of and experience with security technologies covering domains Virtualisation, Software Defined Networks, Cloud IAAS/PAAS/SAAS, Network and DMZ infrastructure, VOIP, Wi‑Fi, 802.1x, Anti‑malware, System protection, Middleware, Collaboration and end‑user workspace solutions, Storage (SAN, NAS), Databases, infrastructure automation services (Infrastructure as a code).
• Preferred professional certifications are CISSP, GIAC, SABSA, ISO 27001 LA/LI. Specific Security related Product certifications are considered an asset.

Your Responsibilities

• Define and advise on the design, implementation, and test processes necessary to protect information system assets.
• Perform risk assessments and translate the security architecture and high‑level policies and controls towards security requirements (secure by design) for business and IT projects.
• Contribute to the architectural design and validate it against the security requirements.
• Define security testing requirements and penetration test scope, actively support the testing squads to perform these tests and approve the test reports.
• Define, implement, and ensure the proper functioning of security services of our tribe in line with IT security policies.
• Recommend and advise on new or improved security services towards the division management.
• Produce documented security services, technical standards, or principles.
• Act as a security subject matter expert within a certain domain (for example Mainframe security, PKI and Cryptography, Network security, platform security, IAM, application security or secure coding), being the point of contact for both business owners/analysts, project leader, risk management, internal/external auditors and off course the engineers, developers, and architects.

Your Profile

• University degree in Computer Science, Engineering, or similar degree.
• IT-security professional with solid experience in the infrastructure security domain or in the IT application security domain.
• Good working knowledge of documentation and presentation applications including PowerPoint, Visio, Excel, and Word.
• Experience translating business requirements into technical solutions.
• Effective organizational, planning and time management skills.
• Effective research, analytical, and critical thinking skills.
• Effective skill exercising initiative and using good judgment to make sound decisions.
• Effective skill maintaining accuracy with diligence and meeting deadlines.
• Effective skill presenting findings, conclusions, alternatives, and information clearly and concisely.
• Able to operate within an international/multi‑cultural, networked environment.
• Fluent in English.
• Squad player who communicates in an open, respectful, and constructive way with customers and peers, both verbally and in writing.
• Strong communication skills, being able to discuss, defend and translate security topics with both senior business people as with deep technical IT experts.
• Ability to handle different projects and cope with pressure and stressful situations.
• Take ownership and ensure that organizational quality standards are met.
• Independent, service‑oriented and organized.

About Us

Why join us

Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.

What We Offer

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.
• Practice your talents in a highly professional international environment.
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

Ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working.

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process. Our values guide how we work together and shape our future: Our mission and values - Euroclear.

About The Team

As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the companys' business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to adequately and effectively protect our information assets.