Cyber Security Risk Manager
Hybrid
Machelen, Belgium
Full Time
26-02-2025
Job Specifications
Company Description
Devoteam is a leading consulting firm focused on digital strategy, tech platforms and cybersecurity. By combining creativity, tech and data insights, we empower our customers to transform their business and unlock the future.
With 25 years’ experience and 10,000 employees across Europe, the Middle East and Africa, Devoteam promotes responsible tech for people and works to create better change.
Join our global community of exceptional talents at Devoteam, where you’ll collaborate with multidisciplinary teams of data specialists, business consultants, solution architects, security experts, cloud engineers, developers, and more across over 20 countries in the EMEA region. As a member of our team, you’ll have the opportunity to work with the world’s leading partners, including AWS, Google Cloud, Microsoft, and ServiceNow, driving innovation and advancing your career.
Job Description
What are we looking for?
If you are fascinated by the risk universe, especially in security, IT, cybercrime, cloud, DevOps … then you are the new colleague we are looking for.
What will your day look like?
You will be a trusted advisor for our customers about the risks they face today in their digital business transformation and how to mitigate those risks to an acceptable level.
You will serve as part of a larger team at our customers, dedicated with the vision to participate to their cyber intelligence cycle. You will follow up the cyber threat landscape by collection of threat information and work on risk analysis. You will identify new cyber trends, relevant to the business and provide advice on threat response plans to key stakeholders. Your focus is to create and maintain best practices procedures, document guidelines respecting the ever-changing rules & regulations and guard compliancy with official standards.
As a Cyber Security Risk manager, you will ensure a sound cyber security maturity level.
Who will you work with?
You will be part of the Cyber Trust team with more than 50 people in Belgium, exchanging insights and knowledge, “ensuring a secure IT environment protecting the business goals”. You will work with our customer’s business and technical employees to capture, discuss and verify cyber risks. You work on flexible daily basis, on-site at client’s office, at Devoteam in Zaventem or at home. You will report to your practice manager, who will be your point of contact for development and career guidance.
Qualifications
We Hire for Attitude and Train for Skill…
The person we are looking for combines the qualities of a good communicator and an expert in the domains of Information Security, Cybercrime, and IT. The more boxes you can tick in the list below, the closer you match the ideal profile we are looking for.
Technical Skills
Master’s in computer science/Engineer or relevant work experience in IT Security with a preference of experience in Risk management.
Experience with Risk Management Projects, Business Continuity Management and Internal Audit to meet regulatory requirements
Experience of working in an environment where you have delivered risk management solutions to clients in a complex technical environment, meaning assessment, design and implementation.
Awareness of IT and risk control frameworks (ISO27001/ISO27002, ISO27005, CIS 20, …). PCI-DSS, SOC2, EU NIS, GDPR.
Knowledge of agile development process is a plus.
Good understanding of security concepts (Zero Trust Network, CASB, Cloud computing, SIEM, SOAR, PKI, DevSecOps, IAM and PAM, …).
Desired/Preferred Certifications
Master’s degree in computer science/Engineer/Cyber Security or relevant work experience in IT Security.
ISO 27K lead auditor or Lead Implementer
Data Privacy and Information Security Certifications are valued including: CISSP, CEH, C/CISO, CISA, CISM, CRISC, CDPSE, CIPP/US, CIPM, CIPT or TOGAF
Who you are
You have a passion for Cyber Security, being the basic ingredient of success.
You have the necessary soft-skills set to successfully understand, challenge and translate the business needs and communicate to the relevant parties with a structured and methodical approach to problem solving
You have good presentation and writing skills, as you will be expected to brief others on your findings and recommendations.
You are a team player and have the talent to cooperate with colleagues in in a changing and fast evolving environment.
You are well organized and work effectively and independently.
You are a self-starter, pro-active and you take initiative.
You are creative, have a critical mind and you like to think out-of-the-box, with focus on solutions rather than problems.
You are prepared to constantly keep your knowledge up to date, follow trainings or through self-study.
Customer focus is your second nature
You are fluent in Dutch and/or French and have a good working knowledge of English
What do we offer you?
New colleagues are well supported by an enthusiastic team of experts.
A culture of continuous development: at Devoteam, we provide you with the right environment to develop talent and expertise: we invest in our people, help them to grow with the warranty to always use the latest technologies.
As part of our Cyber Trust team, you will constantly be in contact with colleagues to learn from them and reverse and you will get the opportunity to contribute to the definition of our Cyber Trust strategy.
Our presence in major companies of telco, public and finance services sectors provides you with the opportunity of building relationships and skills that will last your entire professional life.
Additional Information
#techies in our minds, #creatives in our hearts, #change in our DNA.
Why choose us?
Cutting-edge Technology: Embrace the latest advancements in IT and digital technologies as we constantly innovate to stay ahead of the competition. Our commitment to adopting state-of-the-art tools and methodologies ensures that you'll work on projects at the forefront of the industry.
Entrepreneur mindset: We value our people over processes. You will develop and grow in an agile and ambitious company where it’s okay to take risks, make mistakes and change plans to find transformative solutions. At the same time, you will learn from the best, building relationships and skills that will last your entire career.
Endless Learning Opportunities: We value personal and professional growth. Through workshops, conferences, and certifications, we offer the resources needed to expand your skill set and reach new heights in your career.
Connect with amazing people: You will become part of a network of +10,000 Devoteamers spread over 20 countries.
Collaborative Culture: Teamwork is at the heart of our organisation. You'll be working side by side with a diverse group of IT experts who share your passion for excellence and will inspire you to think outside the box.
Impactful Projects: Tackle real-world challenges that matter! From revolutionising business p...
About the Company
Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Know more
Related Jobs
- Company Name
- AlmavivA S.p.A.
- Job Title
- Security Architect
- Job Description
- Please carefully read the job description before applying. Only shortlisted candidates who meet the requirements will be contacted. DESCRIPTION OF THE TASKS: Architecture, design and implementation of the integration layer between backend systems and secure messaging software Provide expert advice on confidentiality, integrity, authorisation, authentication, non-repudiation, availability Assist the team to test and conduct periodic vulnerability and security risk assessments of the messaging and data transfer system Provide comprehensive guidance and consulting for the optimisation of the integration layer Participate to the maintenance of technical specifications related to transport and messaging protocols and their implementation in software LEVEL OF EDUCATION : Bachelor or Master Degree KNOWLEDGE AND SKILLS: At least 7 years of specific expertise in Document Protection: Good knowledge of digital signature and encryption with X509 certificates, Public Key Infrastructure (PKI) Good knowledge of data containers: Associated Signature Containers (ASiC), gzip Good knowledge of the legal framework for the use of trust services: the Electronic Identification and Trust Services Regulation (eIDAS Regulation 910/2014/EC) At least 7 years of specific expertise in Messaging: Good knowledge of open standards for data and document exchange: ebMS3, AS4, SBDH, XHE Good knowledge of open standards for service discovery: Business Document Metadata Service Location (BDXL), Service Metadata Publishing (SMP) Good knowledge of message format standards: XML (min 7 years) XSD, XPATH, WSDL, JSON, JSON schema Good knowledge of Business-to-Business (B2B) and Electronic Data Interchange (EDI) and common data and document exchange patterns At least 5 years of Specific Expertise in Web Security: Good knowledge of techniques used to secure Web applications: HTTP, TLS, WS-Security, Content Security Policy, Web Services (SOAP and REST) min 7 years, OAuth2, OpenID, OWASP AT LEAST ONE OF THE FOLLOWING AREAS: BACKEND DEVELOPMENT (7 YEARS): Excellent knowledge of backend development techniques: inheritance, polymorphism, SOLID principles, data types, concurrency, design patterns, unit testing Excellent knowledge of the Java platform: garbage collection strategies, memory spaces, class loaders, serialization, multi-threading, syntax and semantics of the Java language, APIs of the Java Development Kit Good knowledge of databases, directories and transactions: SQL, LDAP, ACID, XA Enterprise java con JPA, JTA Multitrading programming AngularJS Experience with Digital Signature: Eidas, Xades, Padex, METHODOLOGY AND TOOLS: Min 5 years of experience in the use of Atlassian collaborative tools (like Confluence and Jira) is required. Experience with Agile development methodologies is a plus Experience in working with the EU institutions is a plus Delivery mode: Near Site (Brussels) Deadline: 05/03/2024 at 11:30 AM (CET)
- Company Name
- bpostgroup
- Job Title
- Network Security Solutions Architect - Bruxelles
- Job Description
- Network Security Solution Architect We are seeking a highly skilled and experienced Network Security Solution Architect to join our team. The ideal candidate will possess deep expertise in designing, implementing, and managing secure national & international network solutions that protect our organization’s critical infrastructure and data. Your Mission: As a Network Security Solution Architect, you will work closely with cross-functional teams, including IT, engineering, and CISO stakeholders, to ensure that network infrastructure delivers the expected level of Security. You will be responsible for: Develop and maintain comprehensive network security architectures that align with industry best practices and business requirements Evaluate new technologies & products, and provide recommendations to improve Network Security infrastructure Participate to the elaboration of the Vision, Strategy and Roadmap for the Network Security infrastructure, supporting Bpost in its digital transformation Architect and lead the deployment and configuration of security technologies such as firewalls (Palo Alto & Fortinet), IDS/IPS, SSL/IPSEC VPNs, forward/reverse proxies, DDoS protection Conduct security risk assessments to identify vulnerabilities and recommend mitigation strategies Ensure compliance with relevant industry standards, regulations, and frameworks such as ISO 27001, NIST2, DORA, and GDPR Stay updated on the latest security trends, threats, and technologies, and proactively recommend improvements to existing security architectures Create and maintain detailed documentation for network security designs, configurations, and procedures Your Profile: We do not only deliver letters and parcels, but also opportunities. This job is open to all with diverse backgrounds and talents, possessing the following skills: 8+ years of experience in network security engineering, with at least 3 years in a network security architecture role Proven experience designing and implementing secure network architectures in complex enterprise environments Experience of SDWAN/SASE (Secure Access Service Edge) legacy solutions (Cisco/Forti SASE) and SaaS (Zcaler, Cloudflare, Netskope) is a strong asset Knowledge of the main Zero Trust concepts is a strong asset (ZTNA, SWG, FwaaS) In-depth knowledge of networking protocols, firewall management, VPNs, IDS/IPS, and encryption technologies Hands-on experience with security tools such as Cisco ASA, Palo Alto Networks, Fortinet, Check Point, or similar Understanding of the Cloud infrastructure Security components Experience with automation and orchestration tools (e.g., Ansible, Terraform) is a plus Strong verbal and written communication skills, with the ability to conduct presentations Analytical Skills: Ability to analyze complex data and make strategic recommendations Fluency in English is required; knowledge of French or Dutch is a plus Preferred Certifications: CISSP; CISM; CCSP; CCIE Security; Fortinet Our Offer: Like a long-awaited parcel, we want to make you feel welcome and valued. Our offer includes: Competitive monthly salary Meal vouchers Hospitalization-, group- and disability insurances A phone subscription and company car 20 days of statutory leave and 7 additional extralegal days off An end-of-year and performance-based bonus and double holiday pay Many benefits from more than 100 bpost-partners Why bpostgroup? Bpostgroup Is Belgium's Leading Postal Operator And a Growing Parcel & Omni-commerce Logistics Partner Globally. With a focus On Social And Environmental Sustainability, We Aim To Be a Trusted Guide In a Changing World. As Our Newest Team Member You Will: Become part of the bpostgroup family with a unique atmosphere and culture. Enjoy a dynamic work environment with a hybrid model allowing for flexibility. Have access to continuous learning and development opportunities. Have a direct impact on decision-making in an international success story. Thrive in a leadership culture centered on visioning, sense making, innovation, and relating, empowering you to lead effectively in our forward-thinking organization. Find out more about bpostgroup No match? Explore other exciting job opportunities with us. More info? Feel free to reach out to Sara Van Reepingen Network Security Solution Architect We are seeking a highly skilled and experienced Network Security Solution Architect to join our team. The ideal candidate will possess deep expertise in designing, implementing, and managing secure national & international network solutions that protect our organization’s critical infrastructure and data. Bpostgroup Is Belgium's Leading Postal Operator And a Growing Parcel & Omni-commerce Logistics Partner Globally. With a focus On Social And Environmental Sustainability, We Aim To Be a Trusted Guide In a Changing World. As Our Newest Team Member You Will: Become part of the bpostgroup family with a unique atmosphere and culture. Enjoy a dynamic work environment with a hybrid model allowing for flexibility. Have access to continuous learning and development opportunities. Have a direct impact on decision-making in an international success story. Thrive in a leadership culture centered on visioning, sense making, innovation, and relating, empowering you to lead effectively in our forward-thinking organization. Find out more about bpostgroup No match? Explore other exciting job opportunities with us. More info? Feel free to reach out to Sara Van Reepingen
- Company Name
- Fujitsu
- Job Title
- Information Security Analyst
- Job Description
- For one of our customers in Braine-L'Allloeud, Fujitsu is looking for a n Information Security and Compliance Analyst BeNeLux Start: ASAP 1PO until the end of the year Job description We are looking for talented people like you to join us! With your skills and passion, we have the necessary tools to realize our vision and engagement to sustainable development. This is our absolute priority! We consider the fight against climate change to be essential, and we are determined to lead our industry towards carbon neutrality. At Heidelberg Materials, we are guided by core values such as authenticity, curiosity, commitment and collaboration. We believe in diversity, both in terms of people and ideas. We actively work to create an environment where everyone can flourish and contribute to our collective success. Join us on an exciting journey of growth and shaping the future of our organization! We prioritize your development while fostering a healthy work-life balance. This position is located in Belgium. You will report to the IT Director with a dotted line to the FR/BeNe Information Security Manager. The Information Security and Compliance Analyst (ISCA) is responsible for supporting the highest standards of information security within HM Benelux. The role has a broad and evolving range of focus areas, reflecting the importance of data across all parts of the business, and the role played by all colleagues and partners in protecting this data. This person will work closely with the France/Benelux Information Security Manager, the wider IT management team, departmental stakeholders in e.g. Legal, HR and commercial functions, Heidelberg Materials Information Security, international peers, and external providers. Your tasks & responsibilities: User awareness and engagement: undertake creative and engaging campaigns and actions to sensitize users to their role in information security. Policies: support the review of IT and data management policies, in collaboration with IT, Legal and HR colleagues, to ensure that these are relevant, accessible, understood, provide a high level of awareness of information security essentials, and align with HM Group standards. Compliance: enable reporting of compliance with the above policies, and with wider Group information security directives, and appropriate follow up with senior management. Documentation and analysis: support the regular review of the IT asset risk register. Data management guidance: drive best practice in data management across all departments. Certification and audit: contribute to a package of measures to ensure adherence to recognized information security standards such as NIST. Support efforts to ensure compliance with legislative norms such as NIS-2, and work with internal and external auditors on all information security related topics. Reporting and management information: provide quality and actionable reporting on the basis of e.g. training participation, simulated attacks etc. Project support for information security related projects including BCP, data migrations etc Job requirements Your profile: You have minimum 2 to 3 years of professional experience in IT. You are fluent in English and French. Dutch is a bonus. You have strong MS Office skills. You have a basic knowledge of cybersecurity landscapes. Detailed technical cybersecurity knowledge is not immediately needed. A willingness to learn, and ability to put this learning to practical use in a complex business environment is more important. You are aware of privacy principles and regulatory requirements (GDPR) and you understand risk management principles, with the ability to identify, assess, and mitigate digital risks. You are able work effectively with a range of stakeholders, fostering a collaborative environment where cybersecurity is seamlessly integrated into the various operations. You are willing to work towards recognized security certification (like CISSP, CISM, CISA, CGEIT, CRISC, ISO 27001/5). You have a close eye for detail, and you are able to work on own initiative with limited guidance. You are able to present information in a meaningful and digestible way. You are familiar with basic project management approaches, tools and phases of the project lifecycle. You are capable and willing to work in an international and multicultural environment with emphasis on service orientation. You are OK to travel within Benelux and France (approx. 10%).
- Company Name
- Oliver James
- Job Title
- Network Architect
- Job Description
- Job Title: Network Architect (Freelance Replacement) Location: Near Brussels, Flemish Region Contract: Freelance - Competitive Daily Rate Job Summary: We are seeking a talented Network Architect to replace our current architect, who is leaving soon. Reporting to the Lead of the Technical Architect Team, you will be responsible for the design and strategic oversight of our datacenter network architecture, ensuring a smooth transition and continued excellence in our operations. Key Responsibilities: Design & Strategy: Develop and maintain the overall design of the datacenter network architecture. Lead strategic discussions on new implementations and migrations. Technical Leadership: Make key technical decisions that impact the long-term scalability and performance of our network. Guide external service providers in executing the strategic vision. Collaboration & Transition: Serve as the main liaison between internal technical teams and external support. Work closely with the outgoing architect to ensure a seamless handover. Technical Environment: Technology Stack: Firewall/Security: Checkpoint, Palo Alto Application Delivery: F5 Networking: Cisco solutions, including ISE, ACI, and Catalyst switches Operational Framework: Internal teams manage operations, while external partners provide network security support. You will primarily focus on design and high-level strategic decision-making within the datacenter. Team Structure: This role fills a vacancy in the Network Competence Center. The organisation is structured into three competence centers (User, Network, and Hybrid Cloud), ensuring dedicated focus and expertise across different areas.