IT Security Analyst

In order to deliver the key points for closure, we require temporary external support. 

Function description The resource will be taking the lead on following remediation topics: 

Setup continuity measures: 

Setup of IT DRP plan, end-to-end.

Definition of continuity test plans, end-to-end, for each scope/object/scenario/contributor. 

Execution of 1 or 2 scenario’s in this plan in 2024. 

Collaborating to a cyber security test in 2024 with business and IT implications. 

Testing backup/restore of critical systems. 

Security policy and procedure improvements: 

Defining policies and procedures in cooperation CISO. 

Change management preparation and execution (communication, presentation, training). 

The resource will be working with service providers and IT Asset Managers on security improvements:

Data leakage prevention

Logging and monitoring

Security logging an detection

Network security

Vulnerability scanning

etc. 

Next to this, the resource might be requested to assist on following activities: 

Access management, implying normal accesses as well as HPA accesses

As-is inventory and as-is rules. 

Challenging of current rules and accesses (including simplification setup rules if relevant) – collaboration with department heads, CISO, etc. 

Review access management process and integrate recertification process structurally, involving relevant ‘roles’ and demonstrating accountability taken up (remote and local accesses). 

Execute recertification of accesses with data owner. 

Setup local CMDB in ServiceNow, including :

Inventory of IT application and infra configuration items (together with partners). 

Define work process to maintain the CMDB inventory (possible embedding in other existing processes, hence work with these process owners)

Define ITIL dashboard in SNOW

Language requirements Dutch Preferred

French Preferred

English Mandatory - fluent

Experience Solid practical experience is needed in the activities listed on the Function Description for which resource needs to take the lead. 

Experience with Microsoft Azure Cloud and tools/services + ServiceNow. 

Working with external suppliers on mitigating security topics. 

Please add references and contact persons. 

Telework Expectation: 60% on site (Tuesday, Thursday + 1 day of choice) & 40% homeworking

Hierarchy The resource will be functionally reporting to the Project Manager in charge of the Audit IT workstream, with a dotted line to the Head of IT.