Leader Cybersecurity Consultant

Leader Cybersecurity Consultant

Netcompany-Intrasoft

Luxembourg

Job Description:

The security unit is seeking a Lead Cybersecurity Consultant to enhance its capacity to protect its ICT infrastructure and applications, develop and update security policies, manage security governance, conduct user awareness, and perform risk assessments on all ICT systems. The ideal candidate must possess excellent organizational skills, be proactive and capable of working independently, have the ability to manage multiple tasks simultaneously, and be prepared to perform and lead security investigations on short notice.

As a Leader Cybersecurity Consultant you will:

Contribute to Security Management activities:

• Draft ICT Security policies, standards, guidelines.
• Perform market reviews, products analyses, studies.
• Lead security-related solutions assessments and labs.
• Lead and manage Security-related projects.

Define and deliver user awareness programs:

• Provide support to Communication and Training Departments for building various material (e.g. posters, flyers, e-learning).
• Lead lectures, conferences, demos and workshops.

Support project and application owners in designing, implementing and maintaining ICT Security:

1. Perform Risk analysis according to state-of-the-art methodologies and practices (including standards such as EBIOS, ISO 27005).
2. Elaborate ICT Security requirements for in-house and outsourced projects and applications.
3. Design and implement Security settings on various kinds of IT components.
4. Supervise Security testing/assessment throughout the projects.

Protect the Institution’s ICT infrastructure and applications:

• Design and implement secured architectures.
• Design and implement Security settings on various kinds of IT components.
• Develop scripts and programs for a more efficient automation.
• Study ICT security standards and regulations for applying them to the European Parliament's context.
• Define security-operating procedures for systems and products.
• Perform security studies and the design of security architectures.
• Select, test and customize software and hardware tools for security.
• Define risk management plans related to ICT security.

Support other ICT Security activities:

• Provide input for policies/standards/baselines writing.
• Perform market analyses, set up labs/PoC for assessing and participate in the evaluation and selection of appropriate technical solutions and/or tools.
• Auditing and reviewing configuration of software, communication, computing systems.
• Respond to incidents and perform technical analysis tasks.
• Design, implement and manage technical security architectures, systems and software.
• Define a taxonomy for ICT assets within the European Parliament.
• Acts as a technical consultant on information security incident investigations and forensic technical analyses.

Qualifications:

What would make you a fit for the role:

• Master’s degree.
• At least 1 ICT professional certification.
• At least six years of professional relevant experience, including 3 years of experience related to ICT security management (e.g. ISMS implementation, cybersecurity policy management, development of security policies and standards), and 2 years of experience as a team leader or project leader for major security-related projects.
• Technical background experience is required with basic understanding of cloud services and infrastructure.
• Very good knowledge of both written and oral English (proficient user - C level, according to the Europass Language Passport classification) is mandatory.
• Good command of French is an asset.
• Excellent organisational skills, ability to work with a minimum supervision and be committed to excellence and quality service delivery.
• Ability to generate reports and written analysis on complex and multi-domain security topics, both at high and technical levels.
• Be available for managing unplanned events and work under pressure, occasionally outside the normal working hours in case of severe security incidents.
• Excellent communication skills, ability to lead multi-lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities.
• Leadership, autonomy and commitment to increasing maturity.
• Excellent team player and ability to coordinate other experts' work.
• Strong background in Risk Management.
• Knowledge of Standards and Policies and experience on drafting documents and reports.
• High level experience in cloud architecture such as Azure and AWS.
• Background as a DevSecOps engineer or knowledge of the domain.
• High level experience in Cyber Security Awareness and policies.
• Knowledge of ServiceNow systems such as Risk Management module and GRC module.
• Furthermore, the client requested a high level of autonomy for the candidate.

Apply Now