Security Risk Manager

Position

Security Risk Manager for Corporate Sector

Education

Bachelor/Master degree

Location

Eindhoven area

Startdate

a.s.a.p.

Contract

Interim 24 months from start

Weekly hours

40

Introduction
For the corporate sectors in the organization we are looking for a Security Risk Manager to strengthen our Security Risk Management function on a temporary basis.
The organization has a security governance where security risk management is embedded on sector level. The Security Risk Manager drives risk identification and risk mitigation within his/her responsibility area in close cooperation with the Sector Security Risk Manager.

Job Mission
Ensure that security risks do not exceed the organization risk appetite by timely identifying risks and maintaining the security risk register, assessing risks, driving risk mitigation and monitoring and reporting on progress.

Job Description

• Identify risks and perform/facilitate risk assessments.

• Drive mitigation of risks; propose mitigating controls in accordance with sector risk appetite and drive implementation and use.

• Keep track of risks and their status in the sector security risk register and report to stakeholders; have a clear oversight on the status of current security controls for the sector.

• Stakeholder management: ensure awareness and ownership of risks/mitigations.

• Ensure compliance to security policies and standards.

• Align with IT security department on IT specific aspects of risk assessments.

• Keep up with relevant international legislation, emerging threats, forecasts, policies and benchmarks.

Education

• Master degree or equivalent combination of education and experience (e.g. in a technical area, business administration, industrial engineering).

• Information security risk management qualifications like CISSP, CISA or CISM.

Experience

• Minimum of 5 years of relevant experience in information security risk management.

• Experience with the ISO27001/2 risk management framework/control.

• Cooperation with and understanding of the IT security domain.

• Basic project management experience

• Knowledgeable on multiple laws and regulations; e.g. GDPR and US export regulations.

Personal skills

• Relationship builder; able to create and maintain a trusted network on all levels.

• Good communication, influencing and negotiating skills.

• Able to inspire and motivate people.

• Strong analytical skills

• Pro-active and self-motivated with the proven ability to drive results.

• Pragmatic, hands-on mentality, motivated by realizing goals rather than personal acknowledgement.

• Able to plan and prioritize.

• Creative when handling problems.

• Flexible, adapting to company culture and individual behavior.

• Fluent in English (written and verbal).

Context of the position
As Information Security Risk Manager you will be assigned to the Security Risk Management team, which is part of Global Enabling Services – Information & Portfolio management.
The GES – Center of Excellence drives and supports improvements in business processes and IT tooling for the organization Corporate sectors. We do this through several distinct services; e.g. Business Architecture, Information Management/Portfolio management, Program/Project Management, and Information Security.
The corporate sectors in scope include amongst others Finance, HR, Legal, Communication, Tax, Treasury, Risk & Business Assurance, Marketing, Global Quality and Enterprise Management Systems.
You work closely together with colleagues in the Security Risk Management team and with (senior) business stakeholders in the corporate sectors.

Contact
Are you interested in this job? Please click on the button ‘Apply’ for uploading your resume. For more detailed information about this job Jessica de Groot also contact Marieke Baijens.