Software Engineer (Python) - long term secondment
Deze opdracht is verlopen. De aanvraag is gesloten of niet meer bij de bron aangetroffen. Bekijk de open opdrachten.
Risk Officer Security Monitoring voor een grote financiële dienstverlener in Amsterdam, via detachering.
- Locatie
- Amsterdam
- Uren
- 32–40 uur per week
- Uurtarief
- € 100 per uur
- Contractvorm
- detachering
- Startdatum
- Sluitingsdatum
- Gepubliceerd
Eisen
- Coordinating remediation across multiple technology teams
- IT and information security risk management
- Issue, waiver and deviation management
- Risk assessments and control management
- Working with application owners, Product Owners, architects and security specialists
- Reporting on risks, progress, dependencies and monitoring coverage
- Security monitoring, logging and SOC processes
Wensen
- Identity and Access Management
- Threat detection and Cyber Defence processes
- Security logging standards and monitoring requirements
- Microsoft Azure or comparable cloud platforms
- DORA, NIST, ISO 27001 and CIS Controls
- SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar
Omschrijving
Risk Officer Security Monitoring for a large financial-services environment in Amsterdam. This role sits at the intersection of cybersecurity, risk management and technology delivery. You will coordinate the full process of identifying security logs, assessing monitoring gaps, managing risks and deviations, and onboarding relevant logging into the organisation's security monitoring platform. You will not be configuring SIEM technology as a hands-on engineer or monitoring alerts as a SOC analyst. Your responsibility is to bring the right teams together, maintain governance and ensure that identified security risks are translated into concrete action. You will act as the primary liaison between Security Monitoring, Cyber Defence, application teams, Product Owners, architects and risk functions. Responsibilities include coordinating the identification and validation of security-relevant events, including authentication, authorisation and audit logs; facilitating the onboarding of security logs into SIEM and monitoring platforms; ensuring application teams understand and apply security logging requirements; embedding monitoring requirements into application lifecycle processes; identifying gaps in logging and monitoring coverage; registering and managing risks, issues, deviations and waivers; assessing the business and security impact of missing monitoring coverage; defining and tracking remediation actions and compensating controls; resolving organisational and technical blockers during log onboarding; preparing governance updates and management reports; maintaining dashboards covering onboarding progress, monitoring coverage, risks and compliance with logging standards; and supporting audits, regulatory reviews and control-assurance activities. The ideal candidate combines cybersecurity knowledge with strong risk-management and stakeholder-management capabilities, understands how SOC and SIEM environments operate, and has experience with IT and information security risk management, security monitoring, logging and SOC processes, risk assessments and control management, issue/waiver/deviation management, coordinating remediation across multiple technology teams, working with application owners, Product Owners, architects and security specialists, and reporting on risks, progress, dependencies and monitoring coverage. Knowledge of SIEM platforms such as Microsoft Sentinel, Splunk or IBM QRadar, security logging standards, Identity and Access Management, threat detection and Cyber Defence processes, Microsoft Azure or comparable cloud platforms, and frameworks like DORA, NIST, ISO 27001 and CIS Controls is relevant. The position is particularly suitable for an IT Risk Officer, Information Security Officer, Security Governance Specialist or Cyber Risk Consultant with experience in security monitoring and log-onboarding programmes.
De oorspronkelijke publicatie stond bij IQ Staffing.
Gegevens automatisch overgenomen uit de oorspronkelijke publicatie; controleer de details bij de bron. Wij zijn geen partij bij de aanvraag. Hoe wij werken.