Cyber Security Risk Assurance Consultant

Cyber Security Risk Assurance Consultant

Proximus Group

Brussels, Belgium

To enlarge the security office in the Core Communication services (CCS) division, we are looking for a Cyber Security Risk Assurance Consultant.

Your Role:

• You advise the teams during project design and execution, checking for compliance with security requirements, and proposing adequate (technical) controls, in line with the standards defined for the business unit.
• You maintain the oversight of compliance with established baselines, and flag and document risk resulting from any deviations.
• You analyse vulnerability reports, audit findings, penetration test reports, assess the risk and develop effective remediation plans for identified deficiencies.
• You support the teams to adopt and integrate our service platforms with security tooling and services, including e.g. tools for vulnerability scanning, SIEM, PAM, PKI etc.
• You establish a positive working relationships with technical teams to effectively collaborate on reducing operational and technology risks.
• You contribute to the establishment of relevant security metrics that will help to assess and report on risk in a consistent and objective manner.
• You provide security requirements to be included in Request for Quotation and Request for Proposal’s, evaluate vendor responses and advise business stakeholders.
• You follow up on the effectiveness of administrative controls, including recurring access reviews/recertifications.
• You review and optimize access rights using our central platforms and tools to restrict access to critical infrastructure and to comply with Proximus security policies, Belgian or European laws and regulations that Proximus has to comply with.
• You engage in operational processes, review change requests, flag and document any risk incurred by these, and facilitate mitigation of this risk where possible.

Profile:

• Bachelor’s in IT and/or cyber security or equivalent combination of education and experience.
• Having industry recognized cybersecurity certification(s): CISSP or CISM are highly considered.
• Very good interpersonal skills, mixing collaboration & communication skills, open minded, constructive assertiveness.
• Eager to learn. Very curious. Wants to develop himself/herself continuously.
• Able to work in an environment which is continuously changing.
• Background telecom, network engineering, or web engineering is certainly a plus.
• Have some knowledge in telecommunication technologies (5G, IMS, IOT, …).
• Language skills: fluent in English (spoken and written). Knowledge of French and/or Dutch is a plus.

Apply Now