Division: Nitro

About the role

• Ensure the availability of up-to-date expert knowledge on risk & security tools, procedures and systems.
• Drive enhancement of the IT security architecture and systems by initiating step changes in the applied policies and systems, developing plans for the future of various areas of information security to ensure sustainable system security for projects and the enterprise infrastructure as whole.
• Lead the investigation and resolution of complex and sensitive security incidents to minimise its exposure and impact, in order to prevent data loss and guarantee confidentiality effectively and sustainably.
• Drive operational vendor management
• Follow-up proactively on IT security technology and business trends and IT security tool enhancements (e.g. new releases) and new or alternative products and practices.
• Drive IT security process and tools optimisation with focus on sustainable prevention.
• Analyse reports regarding compliance to the applicable security policies, procedures and guidelines, formulate recommendations to management about new IT security standards and procedures to prevent security risks in the future.
• Develop functional and technical specifications of the applied IT security processes and tools.
• As an expert ensure the realization of IT security solutions and perform quality assurance, including operational vendor management.
• Advise the management and the IT departments about the latest standards and best practices of IT and information security management and concrete information security solutions to prevent data loss and to guarantee confidentiality and integrity
• Provide active support in the resolution of complex and sensitive IT security incidents.
• Support projects as technical expert (e.g. stream leader) and support project leaders in planning.
• Identify improvement opportunities, generate ideas and contribute to the development of security solutions.
• Participate actively in the work of agile teams (scrum) of the assigned projects requiring security expertise, by co-planning, co-prioritising, and co-evaluating the teamwork and executing the tasks agreed with the team members.
• Contribute to the development of controls and processes improving information security services.
• Promote, train and practice compliance to NITRO IT security standards.
• Be the companywide ambassador of preventive IT security. Participate in vendor selection and challenge the proposals of the external providers.

About you

• 5 years of experience in an international matrix organisation
• Good understanding of the organisation, the work processes and the way systems and applications are used by the business partners.
• In depth understanding of security principles, policies, procedures and guidelines
• Expert knowledge of information security practices and applications (tools)
• Knowledge of agile manifesto, values, principles and practices using Kanban and Scrum
• Basic knowledge on commercial negotiation and tactical vendor management
• Fluency (reading, writing and speaking) in English
• Analytical, conceptual, methodical, process and result oriented thinking
• Ability to deal with ambiguity
• Excellent communication and persuasion skills with impact and influence
• Teamwork & cooperation
• Project work and working in a scrum as team member, applying common agile practices (working and delivering results in self-organizing multifunctional teams etc.)
• Basic negotiation skills

We go beyond boundaries. Together.