Platform Security Consultant

We are seeking an interim Platform Security Consultant to join our team.

In this role, you will be a key contributor in supporting the concept of "secure by design," influencing projects and operations to implement adequate and proportionate security coverage across Business and IT processes, systems, and operations. You will help manage the growing risk posture of our organization as our vendor landscape continues to evolve.

Responsibilities

• Act as the one-stop shop for any security-related topic, needs, requirements, guidelines, and incidents
• Formally assess information security risks related to solution and business projects, determine the potential impact of those risks, and conduct follow-up on any necessary remediation efforts throughout the project lifecycle
• Collaborate hand in hand with DevOps teams (developers, product owners, business) to translate domain and ISO requirements into practical operational guidelines
• Conduct initial and ongoing formal assessments of information security risks related to vendors, determine the potential impact of those risks, and follow up on remediation efforts
• Develop specialized knowledge of and key relationships with local brands, ensuring that security is embedded in each brand and that their security needs are being met
• Partner with team members to identify opportunities for implementing common security solutions or leveraging existing ones
• Drive strategies and efforts to facilitate business ownership of data, including creating necessary tools for identification and tracking of data repositories, training materials, and professional presentations
• Demonstrate specialized knowledge, including data protection methods, in at least one of the following areas: application security, SDLC, perimeter network security, cloud, mobile, or digital
• Share expertise with other team members to facilitate ongoing activities
• Actively expand consulting and assessment capabilities through training courses, mentoring, and daily interaction with internal customers

Requirements

• Bachelor's degree or equivalent technical training in Information Technology, Information Systems Security, Cybersecurity, or a related field (Master's degree preferred)
• 4+ years of relevant IT and Information Security experience
• Expertise in at least one of the following areas: application security, SDLC, or perimeter network security
• Knowledge of cloud, mobile, and digital security, including data protection methods
• Familiarity with security-related legal and regulatory requirements
• Understanding of the retail industry
• Solid communication and presentation skills
• Ability to act independently with minimal supervision
• Advanced English proficiency (C1) with exceptional written and verbal communication skills

Nice to have

• Knowledge of Dutch