[ad_1]

PURPOSE:
To translate the Risk vision and develop practical and pragmatic solutions, processes and services to adequately secure the services to adequately secure the assets of the client organisation and its subsidiaries.
And this at strategic, tactical, and operational level.

MAIN ACTIVITIES:
– Information Risk Management / Third Party Risk Management:
– Support in setting up and maintaining a third party information risk management framework
– Active execution and follow-up of (third party) information risk assessments
– Support in the creation or maintenance of information risk analysis, information risk treatment" and "information risk monitoring" processes, policies and sandards

Knowledge development:
– Stays abreast of new developments regarding CISO domains and examines how these can be can be applied within the client organisation
– Stays abreast of new security threats, market developments, technologies, relevant legislation, IT technical and other security developments

CRITERIA
Responsibilities:
– Information security management
– Information Risk Management

Expectation:
– Knowledge and relevant experience in Third Party Risk Management
– Knowledge of IT Risk & Information Risk Management
– Knowledge of a general CISO organisation
– Knowledge of IT processes and technology
– Targeted contacts with third parties in a professional way
– Certifications : CISSP, CISM are a plus
– Knowledge of Service Now is a plus
– Knowledge level Master or equivalent through experience
– Relevant work experience of 3-5 years
– Knowledge of ISO2700x standard
– Is bound by the policy and vision concerning Information Security, the strategic CISO plan, ISO2700x,
current legislation (GDPR, NKI, NIS,…

[ad_2]

Source link