Title of role – IT Risk EngineerLocation – Amsterdam, NetherlandsEmployment Type – 6-12 month contractExperience level needed – 5+ yearNo remote allowedKindly note competent and proficient are the categories decided by customer, basis technical competency identified during the technical discussion.Role definition –seeking an IT Risk Engineer, who understands the need to keep IT risk under control and able to assess potential risk, implement IT controls, perform/ develop secure codes. Ensures that the system is deployed to meet the level of security & reliability and defines the appropriate event alerts to monitor.Mandatory Skills and Certification –Perform system security administration on designated technology platforms, including operating systems, applications and network security devices.Proactively identifies weaknesses and vulnerabilities in the network infrastructure using security logs, network analysis, and observations.Maintain vendor relationships and ensures that contracts properly support the company.Work with stakeholders across the business to drive continuous security improvement.Provides thought leadership around industry best practices for areas of responsibility.Proactively and independently support IT security infrastructure team.Manage the risks and issues ensuring they are communicated and mitigated so that the business is kept fully informed of progress, and impact on external customers is minimized.Advice stakeholder for concerning security issues (both technical and conceptual)Perform root cause analysis and resolution for all security applications or software issues.Strong interface with the threat and vulnerability management, system administrators and desktop architecture and support teamsStrong competency in layer two and layer three networkingGood knowledge of WINTEL, UNIX/Linux (AIX is advantage), VMware virtualization.Certifications preferred - CISA, ITIL, CISM, CEH, CRISC, SOC2, Cloud Security, Server AdministersExpected qualification and critical experiences –Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent experience).Strong competency in layer two and layer three networkingExperience performing infrastructure security testing on a mixture of technologies and platformsExperience in analyzing and decomposing infrastructure architectures to identify security gapsGood knowledge of WINTEL, UNIX/Linux (AIX is advantage), VMware virtualizationDeep understanding of Banking or Finance Sector and related InfrastructuresFamiliarity with regular expressions and scripting languages a plusWriting data loss prevention technology rules and analyzing events a plusComprehensive knowledge of multiple OS platforms with strong emphasis on Linux
