Offer summary

Qualifications:

Advanced proficiency in English is required., Expertise in DORA & Regulations and Risk & Control environments with a focus on security., Proven experience in designing and delivering asset-based risk assessment frameworks., Familiarity with IT GRC, ERM, CMDB, and Vulnerability Management..

Key responsabilities:

Lead the delivery of the security risk assessment service for a major international insurance client.

Coordinate and prepare workshops and live sharing sessions with up to 150 participants.

Update existing instructions and roll out an asset-based risk assessment framework in 2024.

Apply best practices from an operational standpoint to enhance security risk management.

Job description

Desde Kapres Technology estamos buscamos un Security Risk Senior Consultant con inglés alto, para un importante cliente del sector seguros a nivel internacional.

Context:

We are looking for the service of an external Security Risk Senior Consultant Service. The mission is not about coordinating other team members but rather a senior doer, responsible for delivery of the service allocated engagement. Advanced PPT presentation Expertise and basic XLS Expertise are necessary . Transversal Team playing is required.

The objective of the mission is to roll out in 2024 an asset based risk assessment framework at scale in the Company. This include the update of our existing instructions.

This include coordination, planning preparation, workshop with entities, organizing live sharing sessions (150 pers.)

The Service must have a level of expertise on applying best practices from an operational standpoint

We already have an Application Infosec Risk Assessment (AISRA) that we’ll augment with PSS security assessments, seek convergence.

We’ll also make sure that the AI and Healthcare “requirements” are included but we already have the supporting librairies.

Expertise:

Expertise of DORA & Regulations
Extended expertise of Risk & Control environment with a focus on security,
Proven design and delivery of Asset based risk assessment frameworks
Extended expertise of Security Risk Framework & Risk Assessments
Expertise to design and evaluation Risk Reduction in a pragmatic and operational fashion for Security.
Expertise of IT GRC, ERM, CMDB, Vulnerability Management
Expertise of what is an SMS for Security and the link with other capabilities starting with Risk Management
Expertise of KRI, KPI and how they support decision making
Expertise of Assurance testing and how this feeds risk assessment approached
Expertise of Risk Management as a 2nd Line and how security operates within that model.

Proyecto estable, de larga duración, con contrato indefinido desde el primer momento. 100% remoto. 23 días laborables de vacaciones.

Required profile