Cyber Defence Advisor – m/f/x – [Enabler].

Job description

Cyber Defence Advisor

Want to help shape the bank of tomorrow today?

At the bank for a changing world, our employees make change their greatest asset, turning challenges into opportunities. They think ahead to offer our customers creative solutions which are perfectly suited to their needs. At BNP Paribas Fortis, the country's number one bank, employees enjoy ongoing career growth in a meaningful, rewarding and flexible working environment.

The Global Security Department supports Information Technology and Business Units to develop adequate solutions for Information Security and Risk Management practices.

Their mission is to enable sound information security risk decisions to be taken by the bank's management, and to help implement a comprehensive information security management system.

The bank's Information Security Strategy commits to deliver upon four objectives: enable the company as a whole to run smoothly; fight against cybercrime; protect our information systems; and manage security risks.

Consequently, the Global Security Cyber Defence team's vision is to support the fight against cybercrime by preparing and responding to unauthorised cyber activity. They do this by providing the following services:

Proactive services – provide support and input to help prepare and secure the bank's systems against cyber attacks. Vulnerability Management ensures the risk of a security breach originating from a vulnerability at infrastructure or application level is strictly controlled.

Reactive services – triggered by a request, incident or event identified by an intrusion detection system or reported by an employee.

BNP Paribas Fortis is looking for a Cyber Defence Advisor to support these services.

Your future job!

As a Cyber Defence Advisor, you will have the following responsibilities:

· Vulnerability Detection

- Support our portfolio of tools and processes to detect vulnerabilities, including recurrent infrastructure and application scanning, ethical hacking and penetration testing

· Vulnerability Qualification

- Ensure the prompt qualification of vulnerabilities

· Vulnerability Remediation

- Coordinate and provide support to IT teams for vulnerability remediation activities, including patch management processes

· Vulnerability Control

- Provide reporting to all levels of stakeholders on the vulnerability remediation status

- Maintain relevant solutions in central governance, risk and control tools

· Vulnerability Governance

- Ensure requirements are met in bank policies and standards

- Describe and implement clear roles and responsibilities

- Maintain the functional architectural framework

- Maintain and automate processes

- Define remediation SLAs and ensure their endorsement at all levels

Highlight your strengths!

Below you will find the skills required for this role, as well as others which would be considered an asset.

Technical experience:

- Bachelor's or Master's degree, or equivalent by experience

- Fluent in English; good knowledge of French and/or Dutch is a plus

- 2-5 years' experience in information security

- Strong network security knowledge

- Working knowledge of at least one scanning tool (Qualys, Retina, Nessus, etc.)

- Working knowledge of entire TCP/IP or OSI network protocol stack, including major protocols such as IP, ICMP, TCP, UDP, SMTP, POP3, HTTP, FTP and SSH

- Good understanding of IT security technology and processes (secure networking, web infrastructure, WinTEL, UNIX, etc.)

- Security Incident Management; CSIRT

The following would be considered an asset:

- Certified Information Systems Security Professional (CISSP)

- Web Application Security Development (OWASP)

- Experience as a penetration tester or ethical hacker

- Working knowledge of popular cryptography algorithms and protocols: AES, RSA, MD5, SHA, Kerberos, SSL/TLS, Diffe Hellman, etc.

- Knowledge of Archer eGRC tools

Business experience:

- Experience of working in cross-functional departments and teams

- Practical exposure to ITIL process management

The following would be considered an asset:

- Knowledge of Information Security (preferably based on ISO 27001/27005 standards)

- Experience within the banking and finance industry

- Project management

Soft skills:

- Team player

- Self-motivated, proactive attitude, strong time management skills

- Good communication and influencing skills

- Good analytical and problem-solving skills

- Ability to work individually, show commitment and determination

- Strong intuition and ability to think outside the box

- Attention to detail while seeing the bigger picture

- Ability to provide on-the-job training and knowledge sharing to other analysts

- Solid sense of integrity and identification with the mission

- Ability to process large amounts of information

In a changing world, diversity and inclusion are core values. At BNP Paribas Fortis, we want to attract and retain women and men of all ages, from all backgrounds, each with her or his own experience. We truly believe that diversity increases performance and creativity. All our offers for full-time positions are also available for 90% or 80% full-time equivalent.

What does BNP Paribas Fortis offer you?

We believe that our evolution is driven and inspired by our employees. In return, we aim to provide optimal working conditions that enable you to develop on both a professional and personal level. We offer a challenging working environment in which you are going to have a real impact within our company. You can actively shape your benefit package to respond to your individual needs.

Tempted by the challenge?

Passionate about this role? Do not hesitate to apply online: we'd love to hear from you!