IT Security Specialist

Job Responsibilities

• Contributing to the design and the execution of concepts and technologies for application security across the organization.
• Providing information security consulting and communicating with all relevant stakeholders.
• Ensuring the effective implementation of Information Security principles and procedures during the full service life cycle.
• Supporting the business with threat modelling, software security remediation and scanning support, application security testing and/or threat assessments  (e.g. DAST, pentests, threat models), perform gap and maturity assessments, participate in security champions programs, assist in driving programs/project agendas to keep business and team mates on track, etc.
• Systematically assess the effectiveness of security controls.
• Security Risk Management, including supporting the life cycle of security risk assessments, assessing and addressing deviations, as well as developing effective strategies to mitigate identified information security risks.

Experience Required

• University degree (primarily in computer science or natural sciences).
• 6+ years experience in Information Security related fields and/ or risk management.
• Knowledge of basic risk management concepts (e.g. risk and vulnerability ratings, activities in a typical threat-risk assessment, impact/likelihood, etc.
• Experience providing software architecture security guidance.
• Proficiency with Cloud technologies (e.g. Docker, Kubernetes) an advantage.
• Knowledge of IT security technology, architecture and processes and profound knowledge of information security management systems
• Proven track record and experience in developing information security policies and procedures.
• Successful candidate will be curious, self-motivated and collaborative.

Desirable Skills

• Experience with relevant GRC tools and applications, ServiceNow and RSA Archer preferable.
• Knowledge in another European language.