Enterprise architect - 4686

<p><em><strong>CV Submission until 012.03.2024</strong></em></p> <p><em><strong>Service delivery: on site Brussels</strong></em></p> <p><em><strong>VASS, in partnership with the European Commission, is currently seeking a talented Enterprise architect to work for our client in Brussels, Belgium.</strong></em></p> <p><strong>Job Responsibilities:</strong></p> <p></p> <ul> <li> <p><strong>Subject Matter Expertise:</strong></p> <ul> <li>Provide expertise in IT Enterprise Architecture.</li> <li>Guide IT Security Strategy and Governance.</li> <li>Manage IT Security effectively.</li> </ul> </li> <li> <p><strong>c-LISO Services Development:</strong></p> <ul> <li>Develop and enhance c-LISO services for Commission Departments.</li> <li>Design and implement workflows and organizational processes for the c-LISO Team.</li> <li>Analyze IT security policy requirements and threat landscape.</li> <li>Assess corporate-level security process implementation; define indicators and dashboards for reporting.</li> <li>Facilitate process and methodology adoption with presentations, consultancy, and hands-on sessions.</li> <li>Design, implement, and maintain the c-LISO Knowledge Management System (KMS).</li> <li>Interface with IT security stakeholders for process and measure implementation advice.</li> </ul> </li> <li> <p><strong>LISO Role - Knowledge Sharing:</strong></p> <ul> <li>Manage a knowledge base related to IT security.</li> <li>Share information on IT security policy, standards, and guidelines.</li> <li>Disseminate good IT security practices.</li> <li>Facilitate methodology application through structured support.</li> </ul> </li> <li> <p><strong>LISO Role - Advisory and Support:</strong></p> <ul> <li>Initiate and follow up on IT security risk assessments and security plans.</li> <li>Offer advice on IT security issues, including vulnerability management.</li> <li>Regularly report to the Department Head on IT security status and improvements.</li> </ul> </li> <li> <p><strong>LISO Role - Training and Awareness:</strong></p> <ul> <li>Launch and promote IT security awareness and training programs.</li> <li>Champion the Cyber Aware programme and related educational materials.</li> </ul> </li> </ul> <p></p> <p><strong>Desired Skills:</strong></p> <p></p> <ul> <li> <p><strong>Experience Requirements:</strong></p> <ul> <li>At least 5 years in Cybersecurity Strategy, including defining objectives and building roadmaps.</li> <li>At least 5 years in IT Enterprise Architecture and IT Security Management.</li> <li>At least 5 years in IT Security Governance.</li> <li>At least 5 years in network security.</li> <li>At least 3 years in risk identification and management methodologies (e.g., ITSRM, ISO27005).</li> </ul> </li> <li> <p><strong>Knowledge and Skills:</strong></p> <ul> <li>Familiarity with Governance, Risk, and Compliance (GRC) tools (e.g., ServiceNow, RSA Archer, MONARC).</li> <li>Understanding of European cyber regulations (GDPR, NIS1/2, EU Cybersecurity Act, EU Cybersecurity Scheme).</li> <li>Proficiency in frameworks: ISO27001, ISO27005, NIST SCF, NIST 800-53, CIS Controls.</li> <li>Experience as a Business Development Manager or Product Manager.</li> <li>Experience managing risks related to third-party service providers, including cloud vendors.</li> </ul> </li> </ul> <p><strong>SPECIFIC EXPERTISE:</strong></p> <ul> <li> <p><strong>Core Expertise:</strong></p> <ul> <li>Information Security</li> <li>Risk Management</li> <li>IT Architecture</li> <li>Computer Networking</li> <li>Cloud Computing</li> <li>Audit Leadership for Information Security Management Systems</li> <li>Vulnerability and Penetration Test Management</li> </ul> </li> <li> <p><strong>Technical Experience:</strong></p> <ul> <li>Utilization of SIEM and Monitoring Tools</li> <li>Management and Security of Diverse Operating Systems</li> <li>Network Security, Firewall Management, and Ethical Hacking</li> <li>Network Monitoring and Management</li> <li>Configuration and Management of Load Balancers</li> <li>Implementation of Cryptographic Solutions and Conducting Vulnerability Assessments</li> <li>Proficiency in Client Operating Systems (Windows, Linux)</li> <li>Management of Large, Enterprise-Level Multi-User Information Systems</li> <li>Security for Enterprise-Level Networks and Applications</li> </ul> </li> <li> <p><strong>Cloud Computing Skills:</strong></p> <ul> <li>Understanding of Cloud Security Architecture and Security Requirements</li> <li>Knowledge of Cloud Governance and Compliance</li> <li>Familiarity with Security and Privacy by Design in Cloud Environments</li> <li>Proficiency with Monitoring Tools (e.g., Splunk, Dynatrace)</li> <li>Knowledge of Cloud Platforms (AWS, Azure, Google Cloud)</li> <li>Design and Implementation of Cloud Usage Practices</li> <li>Application of Cloud Service Providers' Security Practices and Compliance</li> </ul> </li> <li> <p><strong>Additional Qualifications:</strong></p> <ul> <li>Involvement in Digital Transformation Initiat