Security Analyst

Overview

We are supporting a global financial services organisation operating critical financial infrastructure that is looking to strengthen its Cyber and Information Security team in Brussels.

The successful candidate will support business and IT projects through security risk assessments, secure-by-design requirements, architecture reviews and security testing. You will work with business owners, project managers, risk teams, auditors, engineers, developers and architects across an international environment.

Key Responsibilities

• Perform security risk assessments and translate policies, controls and business needs into clear technical security requirements.
• Advise on the secure design, implementation and testing of applications and infrastructure.
• Review architectural designs and validate them against security requirements and secure-by-design principles.
• Define security testing requirements and penetration-testing scopes, support testing teams and review final reports.
• Develop security standards, technical principles and documented security services.
• Act as a subject-matter expert across areas such as IAM, PKI, cryptography, network security, cloud security or application security.

Experience Required

• At least three years of cybersecurity experience, with senior candidates expected to have ten or more years across multiple security domains.
• Strong experience in application security, infrastructure security, security risk assessments or security architecture.
• Knowledge of IAM, IDaaS, PKI, federation, secure access management, data protection, endpoint security or network security.
• Understanding of application security, OWASP, code-scanning tools, CI/CD pipelines and security automation.
• Experience with cloud technologies, including IaaS, PaaS and SaaS, alongside virtualisation, networks, databases or infrastructure as code.
• Strong communication skills with the ability to explain security risks and recommendations to both senior business stakeholders and technical teams.

Preferred Qualifications

• Degree in Computer Science, Engineering or a related discipline.
• Certifications such as CISSP, GIAC, SABSA, ISO 27001 Lead Auditor or Lead Implementer.
• Security-related product certifications would be advantageous.
• Experience working within financial services, critical infrastructure or another highly regulated environment.
• Strong documentation, presentation, analytical and organisational skills.
• Fluent English and the ability to work effectively within an international, multicultural environment.