Business Process/Security Analyst - ISO 2700x / ISO 17799 / BS7799, CISSP / CISA
Contract
6months + extensions
Hague/Netherlands
Up to 390 euros per day depending on experience
Start: 02.01.2012

J&C; Associates in looking for Business Process/Security Analyst for one of their clients in Netherlands.


As a Business Analyst you will be expected to assist with the build and formalization of the internal team and external partners to identify the policies, processes and procedures that are not optimized and then identifying how they should be improved. As well as acquisition and definition of the requirements, this will include the formal assessment documentation of risks. You will also assist with the implementation of the information security management system.

As well as business analyst skills appropriate to the work planned, the business analyst will have:
• Established experience as a business analyst in security related projects.
• Experience with large information security management system related projects.
• Experience assessing risks to business information that will impact the design of the information security management system
• Identifying common vulnerabilities and attacks that are relevant for the environment(s).
• Skills in a number of technical areas including networking, firewall technologies, intrusion detection systems, cryptography, antivirus, operating systems and application security.
• Skills in identifying problems with security practices both physical and virtual.
• Worked with ISO 2700x or ISO 17799 or BS7799.
• Experience as an information security management system auditor would be very desirable.
• Appropriate professional certification such as CISSP and CISA.

Requirements:
• 10 years experience working in the information security field.
• At least 4 years of proven staff management skills and leadership of IT professionals.
• Demonstrate the ability to build and maintain relationships and work constructively within their own team and with other external teams.
• Assertive and decisive and have a service and results oriented approach to their work.
• Be able to formulate, propose and participate in the strategy and architecture of information security systems.
• Understand the importance of security, not just as a standalone topic, but in the context of its business benefits.


Please apply asap for more information!