INTERESTED IN THIS JOB? – CLICK HERE
Analyst
ICT
+31 (0)70 311 7822
adelina@bluelynx.com
Description
Our client, a highly respected and extremely prestigious global leader in the integrated energy and chemical industry, is looking for a Senior Information Security GRC Analyst to join their dynamic, multicultural and multilingual organisation in The Hague.
Job Profile for Senior Information Security GRC Analyst
Responsibilities will include but not be limited to:
- Develop and maintain a formalised GRC framework, utilising standards-based controls aligned to business-specific threats
- Assess, prioritise, and update existing IT security policies and standards to reflect the compliance framework
- Perform risk assessment of new IT projects, identify areas of potential technical and process vulnerability, recommend compensating controls
- Provide leadership and direction to ensure the proper governance occurs through Third Party Risk Management program
- Evaluate and maintain up-to-date knowledge of the effectiveness of GRC standards and compensating controls in mitigating IT risk
- Interact with Internal Audit and IT teams to ensure ongoing Compliance with company IT security policies and standards
- Define GRC framework metrics and key risk indicators, maintain a management dashboard and produce an annual GRC framework compliance report for executive management
- Provide training and support to management and employees regarding GRC programs and requirements
- Work with internal and third-party IT security partners to stay current on industry trends, controls and security technologies and services
Candidate Profile for Senior Information Security GRC Analyst
- Must be fluent in English, both written and spoken
- Bachelor’s degree in a technical field such as Computer science, Management Information Technology (MIS), Engineering, and Mathematics is strongly preferred
- Minimum 7 years of relevant experience
- Experience in defining, implementing, and maintaining a GRC framework within a diverse business environment
- Practical experience in assessing compliance with common standards such as ISO 27001/27002/27005 and IT security risk frameworks such as the NIST Cybersecurity Framework
- Competent with SAP (e.g., MM, QM, Fl, BW, HR), Gui XT, Winshuttle, and SharePoint
- Experience in IT risk modelling
- Strong problem-solving skills, including the ability to develop novel risk management solutions
- Preferably experience with systems analysis, systems engineering or equivalent
What Our Client Offers
- Competitive salary
- 13th-month salary
- Discretionary annual bonus
- Have every second Friday off (company-wide)
- Travel costs reimbursement
- Subsidised canteen
- Opportunity to work in the number one oil company in the world
Already imagine yourself in this position? To make the first step, click Apply or email us your CV at cv@bluelynx.com
Please note:
Candidates may be required to present references and diplomas, and may have a background check done as a part of the Blue Lynx recruitment procedure.
Thank you for your application with Blue Lynx. Due to the volume of applications we cannot respond to everyone. Therefore, when you have not had a call or email from one of the Blue Lynx Recruiters within 5 working days your CV has not been selected. Please register with Blue Lynx when you have not already done so, click Register Online
You can email queries and question to cv@bluelynx.com.
For a broader picture of Blue Lynx and all published vacancies please visit www.bluelynx.com.
Kind regards, The Blue Lynx Team