Job Title: Operational Security Officer (OSO)
Job Description: As an Operational Security Officer (OSO) in the Infrastructure and Workplace (I&W) department, you play a crucial role in enabling colleagues to work flexibly, future-proof, and above all, safely. You are the operational link between the I&W department (1st line) and the CISO office (2nd line) for the translation and compliance with these frameworks.
About our client: We are a company that values the safety of its operations. We are looking for an enthusiastic individual who is keen on cyber threats and follows developments in the field of security systems.
Your Role: As an Operational Security Officer, your responsibilities include:
• Providing solicited and unsolicited advice in the field of awareness and support projects related to information security and cybersecurity.
• Periodically holding discussions with system, network and application managers to identify the risks regarding systems and applications.
• Contributing to the awareness of colleagues regarding information security policy and current threats.
• Working closely with various teams to support them in identifying, evaluating and improving security measures.
• Informing the ISO about compliance with the security policy and guidelines within I&W.
• Facilitating the implementation of PEN tests and supporting suppliers and internal specialists.
• Periodically assessing new applications for information security requirements.
• Being the first point of contact within the line organization in the field of management of vulnerabilities, risks, information security incidents, findings.
• Handling information security incidents and conducting additional technical research together with the specialists.
• Initiating the Risk Acceptance process if a security risk is not (sufficiently) mitigated or remains open for too long.
• Carrying out technical checks to test the quality of the security measures applied.
• Implementing mitigating measures together with the right specialists and having the technical know-how.
• Making proposals to the SOC team to improve the detection measures.
Requirements: To be successful in this role, we ask the following from you:
• HBO and/or university working and thinking level.
• A technical background.
• Demonstrable experience in securing the Modern Workplace based on Microsoft Cloud technology, including VDI environments, desktops, laptops, tablets and telephony.
• Ability to translate complex security issues into understandable language.
• Demonstrable experience with Entra ID, Intune and Microsoft Defender for Endpoint.
• Demonstrable knowledge of internet security, information security, GDPR, ISO27001, BIO, Cybercrime/Cybersecurity or similar topics.
• Demonstrable knowledge/experience with hardening (Web apps, O/S, IoT etc). • Knowledge and experience with patch management and vulnerability management.
• Knowledge and experience with the Agile working method.
• Experience in monitoring compliance with security guidelines of I&W resources, which are/have been implemented according to a CI/CD method.
• Ideally, you have certifications such as CISSP/CSSP, Microsoft certifications such as SC-100, MS-500, SC-300 and Comptia Security+ and/or comparable qualifications.
We Offer: You will have excellent employment conditions:
• A salary between €4,299 and €5,940 (scale 11 for medior) or €4,775 and €6,698 (scale 12 for senior) per month for a 36-hour work week.
• An allowance on top of your salary of no less than 21%. You can have this paid out in extra days off, training, or salary.
• The ability to perform your work both at home and in the office.
• The possibility of flexible working hours, depending on your work.
• A generous personal training budget of €6,000.
• Travel allowance or a home work allowance of €3 net per day working from home.
• A reimbursement of up to €850 to set up your home workplace.
• Pension insurance through the ABP Pension Fund.