About the mission
We are looking for a Senior Digital Risk Officer & Security Architect to manage and report digital risks within our organization. This role requires excellent knowledge of cybersecurity standards and experience in risk management in complex digital landscapes. Strong communication skills are essential as the position involves collaboration with various stakeholders.
Read the full description
In the coming period, the Digital Security & Risk Office will need a Senior Digital Risk Officer & Security Architect to take on various digital risk management and cybersecurity architecture activities. The focus of activities will be on actively, consciously, and formally monitoring, managing & reporting digital risks in our landscape. This monitoring is, of course, done together with the 20+ risk owners. Excellent knowledge of IT, OT & IoT solutions, security standards, and security implementations is required. For these positions, candidates must have a very good knowledge of international security standards regarding information security (ISO27x) and risk management standards. This knowledge is needed to apply these standards in real-life cases, supplemented by the necessary experiences. The outcome of the security architect are implementable (security) architectures that are robust against cyber risks. Preparing risk analyses and organizing and guiding 'Threat Modeling' is also part of the task of the sought profile. As the Digital Security & Risk Office, we translate the validated guidelines from the CISO & DPO into concrete security architectures. Candidates can bridge the gap between theory and practice; excellent communication skills are therefore a MUST, as the Senior Digital Risk Officer & Security Architect acts as the 'risk & security' glue between various stakeholders.
Skills
Proven experience as a risk manager in complex digital landscapes
Proven experience in the preparation, management, and handling of cybersecurity risks specifically for a NIS2 essential entity
Proven experience in a similar business context (number of users > 5000)
Proven experience with IT, IoT, Cloud & OT security
Proven experience with risk management (e.g., through the application of ISO/IEC 27005)
The candidate can demonstrate during the interview that they possess the necessary communication skills to manage digital risks with stakeholders
Knowledge of all ISO27001 & ISO27002 security concepts by presenting relevant cybersecurity certificates (CISM/CISSP/...). The certificate must be uploaded here.
Knowledge of NIS2 & GDPR legislation and experience with its application in digital landscapes
Proven experience in protecting information, processing, transport, and storage in on-prem and (Azure) cloud, Apps, web applications,…
Proven knowledge and experience of ITIL
Knowledge of security methods for software development and SDLC
Knowledge of an artificial intelligence management framework (e.g., ISO42001) by presenting AI training history
Proven experience with procurement files in accordance with public procurement legislation
Additional Info
As the largest distribution network operator in the Benelux, (cyber) security & compliance are high on our agenda. Due to the accelerated digitization in our activities, there are many new risks that we need to keep under control alongside the many benefits. There are also many new legal requirements (NIS2, CER, ...). The identification and management of digital risks are taken up within the Digital Security & Risk Office. These digital risks are mapped out by the Digital Risk Officer, monitored with the risk owners, and reported to senior management. This assignment includes:monitoring & managing digital risks in our landscape, in close collaboration with the 20+ risk owners.
monitoring the implementation of the validated management measures
team player, the candidate must be able to work well in a large digital ecosystem. Experience in companies with more than 200 ICT professionals is a plus
Ability to work independently
possesses strong communication skills
has a good personal network where they can turn to for security challenges they do not immediately have an answer to.
What you'll do
- Monitoring & managing digital risks in our landscape, in close collaboration with the 20+ risk owners.
- Monitoring the implementation of the validated management measures
- Team player, the candidate must be able to work well in a large digital ecosystem. Experience in companies with more than 200 ICT professionals is a plus
- Ability to work independently
- Possesses strong communication skills
- Has a good personal network where they can turn to for security challenges they do not immediately have an answer to.
What we're looking for
- Proven experience as a risk manager in complex digital landscapes
- Proven experience in the preparation, management, and handling of cybersecurity risks specifically for a NIS2 essential entity
- Proven experience in a similar business context (number of users > 5000)
- Proven experience with IT, IoT, Cloud & OT security
- Proven experience with risk management (e.g., through the application of ISO/IEC 27005)
- The candidate can demonstrate during the interview that they possess the necessary communication skills to manage digital risks with stakeholders
- Knowledge of all ISO27001 & ISO27002 security concepts by presenting relevant cybersecurity certificates (CISM/CISSP/...). The certificate must be uploaded here.
- Knowledge of NIS2 & GDPR legislation and experience with its application in digital landscapes
- Proven experience in protecting information, processing, transport, and storage in on-prem and (Azure) cloud, Apps, web applications,…
- Proven knowledge and experience of ITIL
- Knowledge of security methods for software development and SDLC
- Knowledge of an artificial intelligence management framework (e.g., ISO42001) by presenting AI training history
- Proven experience with procurement files in accordance with public procurement legislation
Skills
- Risk Management
- Cybersecurity Standards
- IT Security
- IoT Security
- Cloud Security
- Communication Skills
- ITIL
- Software Development Security Methods
- Artificial Intelligence Management Framework
- Public Procurement Legislation