SAP security specialist

SAP security specialistEmailShare

Locatie: Veldhoven, Noord Brabant Datum Geplaatst: 22-05-2019 Klik hier om te reageren

Do you have a passion for SAP security and application security? Do you wish to have an impact on how we secure our SAP environment and how we conduct security assessments? Then we would like to talk to you!

Job Mission
As Specialist in SAP Application Security you will be part of the IT Application Security team in and work together with about 18 of your colleagues in IT security and will responsible for conducting detailed Security assessments mainly on SAP and on new and existing Applications and IT services, assist and advice projects on security related questions and help drive the security improvements. You will be interacting with stakeholders on different levels in in IT, but also within sectors.
SAP technology plays a key role in the security assessments. Experience with a security of a wide range of SAP applications is a must in this role.

Job Description
Providing SAP security guidance for projects and installed applications.
Performing SAP security assessments
Performing SAP security and vulnerability reviews
Developing/improving SAP security dashboards/reports
Improving and maintaining an Application Security Register, Manage and follow-up on security assessment findings*1.
Keep track of follow up actions and deliver management reporting.
Assess IT security exception requests on validity and provide advice to the team lead application security and business stakeholder for acceptance or rejection including advice on additional security controls.
Assessing applications and systems to be implemented or actual implementations based on assessments of high and low level designs, interviews and/or testing.
Translating assessment results into an Information Security Specification (Security plan for service).
Communicate observations to the relevant stakeholders, advise on mitigation and follow up on actions.
Performing detailed security assessments on applications and IT services;
Adding information to the different Security registers from BIA’s, TVA’s, penetration/security tests, vulnerability scans, exceptions and other sources;
Report on progress and deliver management reports;
Improve procedures to keep the security registers and application registers up to date;
Advise on security improvements and additional controls.
Assess IT security exception requests.
*1 The security finding register contains all security assessment findings and risks that are reported within IT Security, and is used to follow up on actions and register progress.

Personal skills
Essential Skills & Experience (key competencies)
Min 4+ years professional experience with a focus on IT applications / information security, risk and compliance;
Experience in Executing Threat and Vulnerability analysis (TVA) or IT Security risk assessments on IT services and applications;
Experience with a wide range of SAP applications is a plus (no authorization management)
SAP Security & Controls
SAP Vulnerability testing
SAP Security implementation
SAP GRC access & process controls
Experience in collecting information through research and interviews;
Excellent English communication and presentation skills. Command of the Dutch language is a plus;
Good working knowledge of Office suite applications like Excel and SharePoint;
Excellent verbal and written communication skills;
Highly-motivated, with a strong work ethic and able to work effectively under minimal supervision.

Certifications and/or Membership
Academic qualifications are an advantage, but not a substitute for professional experience;
Valid industry certifications such as the Certified Information Systems Security Professional (CISSP) are a plus;
Experience in ISO 27001, NIST-800 or equivalent are a plus

Startdatum opdracht

16-6-2019

Einddatum opdracht

16-9-2019

Max tarief 85

Contactpersoon voor deze aanvraag is Thirza Loois.