.Our Security Operations Engineer will take ownership of our security framework. Think processes, procedures and making those 'work for us' instead of 'against us.' Your effort will lead to the continuation and betterment of the Fourthline compliancy from a regulatory, security and customer perspective. In other words: your work impacts our entire business. As part of the global security team, you have an international (European) focus in your work within the IT Security team.What is it we ask from you then?You will protect the company property by identifying, preventing, detecting and responding to security and risk events. The core: Fourthline compliance coverage is always 100%. From start to finish.From tech and non-tech processes to informing and guiding colleagues. You do this while you innovate our strategies towards those goals, and you are the guru "on our (internal) Operating principles".Tasks and Projects:You will create new - and improve existing - policies in the operational Security / Risk / Compliance domain.You will operate - and improve - the internal security processes that we have today.You will participate and complete the time-sensitive operations (such as audits) as end responsible.You will initiate (external) initiatives that will improve the security within Fourthline. Think:ISO27001 operations(External) pen-testingDefect managementSecurity monitoring (ongoing)Internal security awarenessOutsourcing vendor managementRBAC (Access Management)Develop, maintain, and champion the rules of conduct in Security!Work together with (and support) our Security Engineers, Risk team and Support Engineers with security related topics.Report issues in a constructive and ready to solve way. If our management just have to say 'yes' to a plan it means you did your job well, wouldn't you agree?Compliance. We mentioned it once, we will mention it again. We comply with many regulatory institutions like the DNB and others. Informing them properly is super important (together with Risk).You are with us for one year from now and looking back you managed to complete all audit activities, have a yearly access management review in place and ISMS operation handling is a check as well. Our SLA's have all been greened out and you managed to operate our security and monitoring procedures to the letter. Damn that's a good job! - Mustafa, IT Security Lead, during your yearly review.Background and Skills:This is not going to be your first rodeo and we think it will not be your last either! We are looking for that positive minded personality with at least 3-4 years of experience that can chop up these hard to chew topics in eatable portions that are workable and make sense to others. But also, a person that loves to take ownership of our (IT) security, policies and procedures
