Experienced Cybersecurity Consultant in Luxembourg supporting EU institutions, enhancing ICT infrastructure security, developing policies, conducting risk assessments, and managing projects; core technologies include AWS, Azure, ServiceNow, and ISO 27005/EBIOS.
On behalf of our client, who collaborates with European Union institutions, we are seeking an experienced Cybersecurity Consultant to work in Luxembourg.
You will join our client's team in order to enhance its capacity to protect its ICT infrastructure and applications, develop and update security policies, manage security governance, conduct user awareness and perform risk assessment on all ICT systems.
What will you be bringing to the team?
Contribute to Security Management activities:
Contribute to building the strategic view for the future of ICT security
Perform market reviews, products analyses, studies, lead security-related solutions assessments and labs;
Lead and manage Security-related projects;
Support project and application owners in designing, implementing and maintaining ICT Security:
Perform Risk analysis according to state-of-the-art methodologies and practices (including standards such as EBIOS, ISO 27005);
Elaborate ICT Security requirements for in-house and outsourced projects and applications;
Define and review architectures for security systems and various kinds of IT components;
Coordinate ICT Security activities in the projects, provide support to project managers;
Supervise Security testing/assessment throughout the projects;
Protect the Institution’s ICT infrastructure and applications.
Perform and/or supervise system risk analysis.
Define security-operating procedures for systems and products.
Define risk management plans related to ICT security.
Define and deliver user awareness programs;
Auditing and reviewing configuration of software, communication, computing systems;
Respond to incidents and perform technical analysis tasks;
Design, implement and manage technical security architectures, systems and software;
Collect information on ICT assets and categorize them according to the taxonomy.
Develop scripts and programs for a more efficient automation.
Regularly attends conferences, professional association meetings, and technical symposia to remain aware of the latest information security technological developments.
Acts as a technical consultant on information security incident investigations and forensic technical analyses.
Requirements
Master's level degree in ICT + at least one ICT Security professional certification is also required (CISSP or CISA)
At least 10 years of professional experience in IT security
3 years of experience related to ICT security management (e.g. ISMS implementation, cybersecurity policy management, development of security policies and standards);
2 years of experience as a team leader or project leader for major security-related projects;
Strong hands-on experience with Cloud security architecture (both AWS and Azure);
Experience with risk management and risk assessment tasks;
Experience with defining, implementing and managing ICT and Information policies, standards, procedures and guidelines;
Knowledge of ICT Security capability building through roadmaps, action plans, maturity models;
ISO 27k knowledge, having a certificate is an advantage;
ITSM practice and implementation of GRC tools (ServiceNow);
Operational best practices like Business continuity plan and Disaster Recovery;
Ability to understand and evaluate the impact of technological decisions on overall business outcomes;
Fluency in English, French language knowledge is a plus.