Security Operations Engineer

**Our Security Operations Engineer will take ownership of our security framework. Think processes, procedures and making those 'work for us' instead of 'against us.' Your effort will lead to the continuation and betterment of the Fourthline compliancy from a regulatory, security and customer perspective. In other words: your work impacts our entire business. As part of the global security team, you have an international (European) focus in your work within the IT Security team.** **What is it we ask from you then?** You will protect the company property by identifying, preventing, detecting and responding to security and risk events. The core: Fourthline compliance coverage is always 100%. From start to finish. From tech and non-tech processes to informing and guiding colleagues. You do this while you innovate our strategies towards those goals, and you are the guru "on our (internal) Operating principles". - And did we define some tasks and projects around this as well then? Of course, we did_ - You will create new - and improve existing - policies in the operational Security / Risk / Compliance domain - You will operate - and improve - the internal security processes that we have today - You will participate and complete the time-sensitive operations (such as audits) as end responsible - You will initiate (external) initiatives that will improve the security within Fourthline. Think: - ISO27001 operations - (External) pen-testing - Defect management - Security monitoring (ongoing) - Internal security awareness - Outsourcing vendor management - RBAC (Access Management) - Develop, maintain, and champion the rules of conduct in Security - Work together with (and support) our Security Engineers, Risk team and Support Engineers with security related topics, no need to mention you will have all the tools you will need. - Report issues in a constructive and ready to solve way. If our management just have to say 'yes' to a plan it means you did your job well, wouldn't you agree? - Compliance. We mentioned it once, we will mention it again. We comply with many regulatory institutions like the DNB and others. Informing them properly is super important (together with Risk).. - "You are with us for one year from now and looking back you managed to complete all audit activities, have a yearly access management review in place and ISMS operation handling is a check as well. Our SLA's have all been greened out and you managed to operate our security and monitoring procedures to the letter. Damnthat's a good job" _- Mustafa, IT Security Lead, during your yearly review _-_ **Background and skills** This is not going to be your first rodeo and we think it will not be your last either We are looking for that positive minded personality with **at least 3-4 years of experience** that can chop up these hard to chew topics in eatable portions that are workable and make sense to others. But also, a person that loves to take ownership of our (IT) security, policies and procedures. Furthermore, you _HAVE_: - A bachelor's degree (minimum requirement) - Working experience with industry best practices like: - ISO27001 - OWASP - GDPR - SOC2 - PCI/DSS - _Certifications in these fields are considered as additional value for us_ - Experience with IT Security policies and procedures (not only information) - Experience with Monitoring solutions (like Azure Sentinel / Splunk) - Growing experience in the 'cloud security assurance' field (cloud vendor security) - Strong stakeholder management experience - Process and improvement driven attitude - Strong communication skills And you _ARE:_ - A reliable colleague and a friend we just didn't meet yet - Pragmatic, easy going and a friendly communicator. Natural charisma adds to your awesomeness - The bringer of structure when there is chaos, an oasis of rest when people need you the most and you excel in a company (scale-up) that sells chaos as 'a dynamic workplace'. - So much more than these words on paperSurprise us with who you are **What do we offer?** We are growing...FAST That means a lot of room for impact in a fairly new KYC market that is exploding You will get the chance to work in an international and rapidly growing scale-up that works with leading names in global FinTech, Banking as a Service, Crypto and Trading platforms. But wait, there's more: - A** 50/50 hybrid WFH/WFO model**. We believe the office can be key to collaborate, be creative and align. And we know you can be productive at home when focus is required. - A** great compensation **package - Pension scheme - **25 days of holidays** to chill - **Senior leadership** team and growth driven teams that bring out the best in you - A great office vibe with over **50 nationalities** to work with - Clear organization structure and open communication - **Office dogs **(They are the cutest ) - Fruit & snacks are always available. - Friday drinks in our very own bar