Platform Security Consultant

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are seeking an interim Platform Security Consultant to join our team.

In this role, you will be a key contributor in supporting the concept of "secure by design," influencing projects and operations to implement adequate and proportionate security coverage across Business and IT processes, systems, and operations. You will help manage the growing risk posture of our organization as our vendor landscape continues to evolve.

Responsibilities

• Act as the one-stop shop for any security-related topic, needs, requirements, guidelines, and incidents
• Formally assess information security risks related to solution and business projects, determine the potential impact of those risks, and conduct follow-up on any necessary remediation efforts throughout the project lifecycle
• Collaborate hand in hand with DevOps teams (developers, product owners, business) to translate domain and ISO requirements into practical operational guidelines
• Conduct initial and ongoing formal assessments of information security risks related to vendors, determine the potential impact of those risks, and follow up on remediation efforts
• Develop specialized knowledge of and key relationships with local brands, ensuring that security is embedded in each brand and that their security needs are being met
• Partner with team members to identify opportunities for implementing common security solutions or leveraging existing ones
• Drive strategies and efforts to facilitate business ownership of data, including creating necessary tools for identification and tracking of data repositories, training materials, and professional presentations
• Demonstrate specialized knowledge, including data protection methods, in at least one of the following areas: application security, SDLC, perimeter network security, cloud, mobile, or digital
• Share expertise with other team members to facilitate ongoing activities
• Actively expand consulting and assessment capabilities through training courses, mentoring, and daily interaction with internal customers

Requirements

• Bachelor's degree or equivalent technical training in Information Technology, Information Systems Security, Cybersecurity, or a related field (Master's degree preferred)
• 4+ years of relevant IT and Information Security experience
• Expertise in at least one of the following areas: application security, SDLC, or perimeter network security
• Knowledge of cloud, mobile, and digital security, including data protection methods
• Familiarity with security-related legal and regulatory requirements
• Understanding of the retail industry
• Solid communication and presentation skills
• Ability to act independently with minimal supervision
• Advanced English proficiency (C1) with exceptional written and verbal communication skills

Nice to have

• Knowledge of Dutch

We offer

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization