USG Professionals focuses on project sourcing, interim management, and recruitment & selection, within the expertise areas of ICT, HR, Legal, Finance, Facility, Engineering, and Science.

As a company, we choose an authentic and inclusive approach where you, as a professional, have the space to take ownership and feel comfortable and happy in your job.

We aim to be a future-proof organization through innovative tools like USG EASY, unique training programs such as 'Start 2 Freelance,' and through knowledge sharing on our podcast channel and innovation meetups.

Download the USG EASY app, apply in 1 click, and follow your application process step by step

Responsible for overseeing IT security operations, managing the members of the SOC team activities and coordinating with security engineers.
Responsible for implementing IT security policies, creating protocols and processes.
Addresses IT security risks and issues on an organizational and technical level.
Coordinates IT security activities and provides support in various IT security services domains.
Supervises and supports the activity of the SOC team, measures and reports their performance metrics.
Runs compliance reports and supports the audit process.

Main Responsibilities

Coordinate IT security operational activities with providers as a member of our EU Security Operations Center.
Coordinate and perform threat and vulnerability management activities, identify risks, recommend treatment plans and provide communicate information.
Coordinate and perform security incident management activities, including detection, response and reporting.
Monitor and report on technical and operational IT security controls.
Recommend and implement security controls to meet security policies, legal, regulatory and audit requirements.
Report on compliance with security policies.
Propose changes to existing IT Security policies and procedures to ensure operating efficiency and compliance.
Provide expert guidance to projects on IT security matters.
Consult with IT and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
Work with the IT Security Manager to develop a security roadmap that addresses identified risks and business security requirements.
Coach and mentor IT security staff.
Stay up-to-date with IT security related technologies and competences
Prepare and conduct security awareness and security training initiatives
 
KPI's
Level of compliance with Information Security regulations, standards and internal policies.
Number of Information Security incidents per severity.
Average of response time on Information Security incidents per severity.
Accuracy of threat and vulnerability analysis.
Number of identified vulnerabilities.
Effectiveness of remediation plans and controls for identified vulnerabilities.

Mandatory qualifications, skills and experience required
 
Bachelor/master degree or minimum 5 years' experience in IT and IT security related matters, preferably in an international environment
Preferably holds an Information security professional certification such as CISMP
Good knowledge and understanding of Information security technologies such as:
Access control
Vulnerability management
Data loss prevention
Web Security
Anti-malware controls
IDS/IPS
IT networks
System Administration
Excellent problem solving skills, capable of working under pressure
Strong information security risk-based prioritization capabilities
Good communication skills (contacts with team, providers and internal partners)
Act as team player and hands-on mentality
Good knowledge of English and Dutch (Advantage)
 
Desirable qualifications, skills and experience required
Willing to travel on a regular basis, mostly to UK.
Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, the U.S. Health Insurance Portability and Accountability Act (HIPAA), the European Union Privacy Directive, and the Japanese Financial Instruments and Exchange Law ("J-SOX").
An understanding of operating system internals and network protocols.
Experience in application and system technology security testing.
Project management skills and experience in creating and managing project plans, including budgeting and resource allocation.
Strong analytical skills to analyze security requirements and relate them to appropriate security controls.