Information Security Consultant (Senior)

Tasks and Responsibilities: You conduct risk analyses according to the ISO 27005 standard. You draw up guidelines, policy documents, and processes regarding information security. You further develop, analyze, and optimize security processes and governance where necessary. You follow up on compliance-related aspects of information security and report on them. You support security architects with issues concerning legal provisions and risk analyses. Your Profile: Demonstrable experience as a senior Security Consultant within data, infrastructure, or application environments. You have demonstrable expertise in a specific domain of information security, for example, information security management processes, vulnerability analyses, penetration testing, application security, Privileged Access Management, or encryption solutions. You have experience in drafting policy documents and processes. You have extensive experience in analyzing, optimizing, and documenting security processes and governance. You are familiar with information security measure frameworks, such as the Secure Controls Framework and ISO 27002. You have knowledge of NIS2. You have experience with security management techniques and relevant frameworks, such as the ISO 27000 series, COBIT for Security, NIST, OWASP, and CIS Critical Security Controls for Effective Cyber Defense. Knowledge of the Factor Analysis for Information Risk (FAIR) method and the MITRE ATT&CK framework is required. Relevant certifications are a plus.