Information Security & Cyber Resilience Support Associate (m/f/d)

Role description:

The associate supports the review, implementation, and operation of information security and cyber resilience controls across market infrastructures. As part of the security team, the associate assesses policies, controls, and change requests, contributes to cyber resilience strategy, participates in red team testing, and helps detect, analyze, and respond to cyber incidents.

Main tasks:

• •Review and evaluate policies, controls, and change requests from an information security and cyber resilience perspective.
• •Implement and operate controls and tools for information security and cyber resilience.
• •Development and implementation of cyber resilience strategies.
• •Conducting red team tests within market infrastructures.
• •Incident management and response: Detect, analyze, and respond to cyber incidents.

Mandatory qualifications for this position, please do not apply if you have no experience in the following areas:

• •At least 2 years of experience reviewing and evaluating policies, controls, and change requests from an information security and cyber resilience perspective.
• •Experience in assessing the impact of changes on operational and cyber risks is an advantage.
• •Experience in conducting red team tests within market infrastructures.
• •Experience with market infrastructures is an advantage.
• •At least 2 years of experience in implementing and operating controls and tools for information security and cyber resilience.
• •Knowledge of relevant software or hardware used in essential financial sector systems and market infrastructures, including new technologies such as distributed ledger technology (DLT), is an advantage.
• •At least 2 years of experience in developing and implementing cyber resilience strategies.
• •Experience working with the market infrastructures of the Payment/Eurosystem is an asset.
• •Experience in incident management and incident response, including the ability to detect, analyze, and respond to cyber incidents.
• •Knowledge of incident response frameworks and hands-on experience in coordinating cyber incident responses in market infrastructures is an advantage.