[ad_1]

For our international client we are looking for an SOC Manager.

Project
Our client wants to safeguard its vital information assets and reputation in the current and rapidly evolving digital landscape. Our client wants to achieve these capabilities by using an outsourced Security Operations Centre (SOC). The SOC will operate in a hybrid model, consisting of an in-house capability in combination with a capability that is outsourced to an external Service Provider.

Our client’s IT environment operates as an EcoSystem of managed services providers. Our client envisions the SOC provider to become a partner within this EcoSystem, with the objective to help mature our client’s Information Security Organisation.
The SOC Manager will be the primary customer of the SOC, receiver of the performance reporting line and focus point for escalation of operations. Together with our client’s supplier management responsible for the existing and future agreements between our client and SOC and overall performance review of the SOC.

The person will become part of the standing security organization, reporting into the Service Manager Security. He or she will work with the SOC project in further setting up the internal security organization (Target Operating Model) and the Security Operations Center service.

Key responsibilities

•(Delegated) responsibility for the relevant business unit with the task of ensuring the required level of Information Security
•Identifying / advising on strategic & tactical digital-security risks for the business unit
•Responsible for implementing Information Security in the business unit. Reporting about it to both business-unit management and Information Security & Risk Manager.
•Regularly performing the PDCA cycle
•Coordinating and supporting the business-impact analyses, threat and vulnerability assessments (TVAs) and compliance activities
•Fulfilling the demand role towards Global Security Officer, organising additional Information Security measures based on risk assessments
•Fulfilling security-expert role re awareness, incidents, outsourcing and privacy
•Ensuring adequate registration, analysis and reporting of information-security incidents
•Organising training and education for information-security awareness
•Actively supporting project with respect to “secure by design”
•Sparring partner for OpCo’s

Competencies

•Knowledge of and experience with security standards and frameworks
•Knowledge of and experience with the (relevant) business processes
•Able to perform and manage BIAs and TVAs independently
•Knowledge and skills to map security risks from a chain perspective
•Able to translate security risks into a combination of ICT and non-ICT security measures
•Ability to manage implementation of security measures, to the extent not coordinated group wide
•Able to, on the basis of equality, act as sparring partner for business unit management
•Core capacities: Risk management, Information-security management, Project Management, Communication and power of persuasion, Organisation sensitivity, Analytical ability, Integrity
•Display professionalism, customer service attitude, attention to detail and quality

Other required

•Experience: 7 – 10 years’ work experience
•Certification (optional): CISA, CISM, CRISC

[ad_2]

Source link