Data Security and Cryptography Expert

Job Description

•             Define security requirements and strategy for Data security and Cryptography for the Group

•             Support subsidiaries in considering data security and cryptography measures

•             Analyze and evaluate security risks, their impacts and propose complementary measures

•             Participate in technical POCs on data security and cryptography solutions (including emerging technologies – innovation)

•             Carry out a technological watch and contribute to the development of the security community within the bank

•             Be responsible and present complex security topics related to data security and cryptography to both IT teams and non-IT teams (e.g., Legal team)                             

Main Tasks:

• Assessment of robustness of designs and data protection mechanisms and keys
• Defining guidelines for the usage of Blockchain within the Bank                                            
• Collaboration in group's cryptographic and data security expert’s stream
• Project orientation towards the best techniques for data security depending on the case (cryptography, anonymization techniques, masking)                                         
• Production of POC on data security technologies (full homomorphic encryption, ...)
• Performing risk analysis, proposing countermeasures                                                 
• Definition of security requirements for cryptography & data security (Group scope)
• Proposals for approaches to inventory of cryptographic assets in the group, and crypto agility                                                 
• Capacity to do presentation to different teams/stakeholders
• Capability to explain security topics from both a technical perspective and a business standpoint                                                     

Qualifications

• IT Risk and Cyber Security                                                      
• Risk Knowledge & Awareness                                 
• Cyber security Knowledge                                                       
• Risk assessment: Raising awareness of ISO 27001/27005/Ebios RM or any other risk management framework                                          

Language Skills:

• English (mandatory) - Mastery

Soft Skills:

• Ability to synthetize/Simplify                    
• Active Listening                                           
• Ability to share/pass on knowledge                       
• Communication Skills - Oral & Written                                
• Ability to inspire others and generate commitment
• Ability to establish and activate networks
• Ability to lead a meeting, seminar, committee, seminar