Security Consultant (Senior)

• Perform information security risk analyses.
• Develop guidelines and policies related to information security.
• Develop and document information security processes.
• Monitor and report on information security compliance.
• Support Security Architects regarding legal requirements and risk analyses.
• Analyse, optimise and document security processes and governance.

• Minimum 5 years of demonstrable experience as a Security Consultant within one or more of the following environments:
• Data
• Infrastructure
• Applications
• Experience developing security policy documents and processes.
• Experience conducting risk analyses according to ISO 27005.
• Experience analysing, optimising and documenting security processes and governance.
• Demonstrable expertise within a specific Information Security domain.
• Knowledge of information security control frameworks, including:
• Secure Controls Framework
• ISO 27002
• Knowledge of NIS2.
• Dutch language proficiency at CEFR C2.

Should Have

• Experience with security management techniques and frameworks such as:
• ISO 27000 series
• COBIT for Security
• NIST
• OWASP
• CIS Critical Security Controls
• Relevant Information Security certifications depending on the area of expertise, such as:
• CISM
• CISSP
• CEH
• Knowledge of FAIR - Factor Analysis of Information Risk.
• Knowledge of the MITRE ATT&CK framework.