Information Technology Security Specialist

IT Security Specialist | Security Risk | ISO 27001 | Utrecht

Are you an experienced IT Security professional who can bridge the gap between technical engineering teams and security risk? For a leading financial organisation in Utrecht, we are looking for an IT Security Specialist to strengthen a complex enterprise technology environment. You’ll work across technical security risk, security architecture, IAM and secure design, helping engineering teams translate security requirements into practical solutions.

About the role

As an IT Security Specialist, you will be part of a technology risk and security environment supporting engineering teams across critical IT infrastructure and systems.

Your focus will be on technical security risk management : assessing systems against security control baselines, reviewing technical designs and architecture, facilitating threat modelling and ensuring security controls are effectively embedded into IT solutions.

You’ll work closely with engineering teams, Risk & Security professionals and other stakeholders to ensure security requirements are understood and implemented pragmatically.

Key responsibilities include:

• Conducting technical security risk assessments and deep-dive security reviews
• Assessing systems against security control baselines aligned with ISO 27001/27002
• Facilitating threat modelling and security risk assessments
• Reviewing security documentation, architecture and technical designs
• Translating and embedding security controls and best practices into IT infrastructure
• Providing practical advice on secure design and implementation
• Developing and reviewing Logical Access Models and Authorization Matrices
• Supporting application security testing for critical systems
• Executing and reviewing controls within the Risk Control Framework
• Supporting security change management and operational security incidents
• Monitoring changes to security standards and assessing their impact
• Improving security visibility through metrics and dashboards

The role gives you the opportunity to work in a large-scale, technically complex financial environment where security, engineering and risk come together.

About you

• Professional experience within IT Security, Information Security, IT infrastructure/support or systems development
• Strong knowledge of ISO 27001/27002 and security control frameworks
• Experience with technical security risk assessments
• Understanding of technical security architecture and secure design
• Knowledge of IAM, logical access controls and authorization models
• Understanding of the Software Development Lifecycle (SDLC)
• Strong stakeholder-management and communication skills
• Able to translate security policies and controls into pragmatic technical solutions
• Proactive and comfortable working independently within defined security and risk frameworks
• Bachelor’s degree in Computer Science, IT, Cyber Security or a related discipline, or equivalent professional experience
• Fluent professional English

Experience within financial services, Agile/DevOps, software development, data engineering or database environments is considered an advantage.

Certifications such as CISSP, CCSP, CEH, CISM or CISA are also desirable.

About Levy Global

Levy Global is a leading international consulting and recruitment organisation specialising in connecting highly skilled professionals with organisations across technology and business transformation.

With an extensive network across the Netherlands and internationally, we support professionals in finding challenging projects where they can make an impact while helping our clients access the specialist expertise they need.