Information Security Analyst

One of my clients are looking for "Security Analyst" for 6-12 month contract in Veldhoven, Netherlands.

Language - English speaking

Minimum hours/week - 32 hours/week

Working Model - Hybrid - 2 days onsite.

Job Description

• Performing information security risk management activities in cloud initiatives. Provide risk

mitigating controls and guidance to the DevOps teams. Report to risk owners on residual risks.

• Contribute to improving means and methods related to our focus domains.

• Actively participate in agile, SAFe ceremonies by ensuring security considerations are part of the continuous improvement cycle

• Align with other cloud security competences (IT and Business) within the security community.

• Perform, advice and follow up on generic risk assessments and identified risks.

• Drive mitigation of agreed controls

• Update the D&E security risk register

• Ensure compliance to security policies and standards

• Alignment with IT (-security) on controls and activities required

Experience:

• 5+ years of relevant experience in information security risk management.

• Proven understanding / knowledge / experience in the IT security domain.

• Proven experience with the ISO27001 risk management framework.

• Solid knowledge on IaaS, PaaS and SaaS (information) security risks(preferably on Azure and GCP)

• Affinity with Research and Development processes, way of working and culture.

• At least a bachelor degree and or relevant education in Information Security, Audit and or Cloud.

• In possession of valid industry certifications (CISM, CISA, CISSP, CRISC, CCSP, etc).

• Pro; Knowledge of export regulations.

• Pro; experience in working in Agile (SAFe) environments

Please apply with an updated CV, if interested and available.