Roles and Responsibilities:
- Review and approve security deliverables: information system security questionnaires, architecture design documents, security checklist.
- Perform Risk analysis and identify/propose mitigation plan
- Make arbitrations evaluating and documenting the residual risk, and ensuring all the exceptions are tracked in the relevant register
- Ensure that Security Inquiry for Partners (SIP) is validated and signed off for all eligible partners in the ecosystem
- Ensure that Secure configurations are systematically applied for given projects or business initiatives
- Security Acceptance: make the right decision considering the residual risk and the asset value
- Act as first level of support for teammates
- Propose patterns and standards evolution
Skills Required:
- Mandatory:
- 4 to 8 years of work experience in cybersecurity
- 2 to 4 years in architecture and design
- Desirable:
- [Not specified]
General Competencies & Skills
- Knowledges and understanding in Security Architecture / Infrastructure Architecture
- Able to identify and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders
- Able to analyse technical risks and vulnerabilities and to design the appropriate network security pattern (firewalling, proxy, WAF, VPN, etc.)
- Good understanding of security tools and mechanisms (IDS/IPS, antivirus, anti-malware, authentication mechanisms, IAM, PKI, encryption, etc.)
- Good understanding of cloud solutions (Microsoft Azure/O365, security solutions in and for the cloud)
- Knowledge of ISO 27002 and ISO 27005
- Fluency in English
Education:
- Bachelor's/Master's degree in Engineering/Technology
- Desirable:
- CISSP or CISM
- Experience in Transport Industry is a plus
