Senior Security Architect - Amsterdam

<p> </p> <p> </p> <p>Country: Netherlands <br/> City: Amsterdam <br/> Req ID: 487745</p> <p> </p> <p><u>About CRH</u></p> <p>We are CRH, and we are committed to contributing to a more resilient and sustainable built environment. We understand the wider impact our businesses can make in supporting human activity. We continue to do this through the delivery of unique, superior building materials and products for use in road and critical utility infrastructure, commercial building projects and outdoor living solutions. </p> <p> </p> <p>CRH is the leading provider of building materials solutions that build, connect and improve our world. Employing c.75,800 people at c.3,160 locations in 29 countries, CRH has market leadership positions in both North America and in Europe.</p> <p> </p> <p>Without you noticing our products, we are everywhere you live, work, and relax. </p> <p> </p> <p>Our <em>project portfolio</em> includes some of the most sustainable and cutting-edge building projects around the world. Think of the asphalt on the <em>Silverstone Grand Prix Circuit, the Paris Metro Rail project, but also the Louis Vuitton Museum in Paris, parts of the Burj Khalifa, and the Kennedy Space Centre</em>. </p> <p> </p> <p>Learn more about us through the following <a href="https://www.crh.com/about-crh/at-a-glance" target="_blank">Link</a>. </p> <p> </p> <p>Position Overview<br/> CRH is looking for a Senior Security Architect. The Senior Security Architect is fundamental in ensuring to promote and embed a security by design culture across CRH EMAT. During cyber major incidents and/or cyber crisis situations, this role will pivot to taking a leading role in the management of the management of the event and support the recovery.</p> <p><br/> Key Tasks and Responsibilities<br/> In this role, you will:</p> <ul> <li>Visualise and articulate complex problems and concepts by interrogating and using data or intelligence, formulating, and influencing solutions and plans.</li> <li>Understand and link complex and diverse sets of information to inform the response and approach (for example, identifying vulnerabilities and their impact)</li> <li>Understand security concepts deeply enough to engage with security technologists and communicate in language that’s appropriate to your audience</li> <li>Design secure system architectures through the implementation of a security by design methodology, to meet user needs while managing risks. Identify and report upon security issues within existing system architectures</li> <li>Make and guide effective decisions on risk, explaining clearly how the decision has been reached</li> <li>Demonstrate knowledge of system architectures, understanding the risk impact of vulnerabilities on existing and future designs and systems</li> <li>Work with business and technology stakeholders to understand the security implications of business change. You can interpret and apply an understanding of policy and process, business architecture, and legal and political implications to assist in the development of technical solutions or controls</li> </ul> <p><br/> Key Functional Competencies<br/> You possess the following:</p> <ul> <li>Extensive experience in information security and/or IT risk management with a focus on security, performance, and reliability </li> <li>Solid understanding of security protocols, cryptography, authentication, authorisation, and security</li> <li>Good working knowledge of current IT risks and experience implementing security solutions </li> <li>Experience implementing MFA, SSO, identity management and related technologies </li> <li>Interacting with a broad cross-section of personnel to explain and enforce security</li> </ul> <p><br/> Experience / Education<br/> You are/have:</p> <ul> <li>Minimum 8 years ITIL-based Service Management in a business-to-business environment   </li> <li>At least 5 years of experience in infrastructure or application-level vulnerability testing </li> <li>At least 5 years of system, network and/or application security experience </li> <li>Fluency in both speaking and writing English</li> <li>Third Level qualification (or equivalent) in information technology, Information Security or Engineering.</li> <li>CISSP, CCSP, GCIH, GIAC (SANS), CCNP, Splunk certificates and / or other relevant security/Network type engineering certifications.</li> <li>Experience or exposure to Network equipment such as Firewalls. switches, routers</li> <li>Experience of log collection, analysis, and correlation toolsets. Including data extraction and manipulation for reporting and investigation purposes</li> <li>Experience of deploying and configuring perimeter defence mechanisms and facilities</li> <li>Experience of modern networking and web related protocols (e.g., TCP, UDP, IPSEC, HTTP response codes &amp; methods, REST API basics, etc.).</li> <li>Experience of hardening and applying modern security standards across servers, workstations, SaaS-based solutions and network equipment