Profiel

• Third-Party IT & Security Assessments - Conduct due diligence, evaluate controls and ensure suppliers meet security and regulatory expectations.
• Cloud Security (SaaS, IaaS, PaaS) - Assess cloud solutions and providers, reviewing architectures and risk mitigations.
• Vulnerability Management & Penetration Testing - Analyse reports, challenge remediation plans and track closure of critical findings.
• Application Security - Identify and assess application-related risks and ensure appropriate security measures.
• Risk & Control Frameworks (ISO 27001, SOC 2, NIST, OWASP) - Apply recognised standards to structure assessments and recommendations.
• Contractual IT & Cyber Clauses - Review and negotiate security clauses with Procurement and Legal to embed robust protections.
• Audit & GRC Practices - Coordinate supplier audits, use GRC tools (e.g. ServiceNow) and support continuous monitoring.
• Stakeholder Management - Collaborate with cyber defense, security architects, continuity experts, Dpos, and business teams.
• Soft Skills - Strong analytical capabilities, clear communication, structured approach, negotiation skills, and ability to coach and influence across our client's team.
• Languages - French and English are mandatory Dutch is a plus.