Security Architecture Programme Lead
Department: CISO/Security Strategy & Architecture
Position: Security Architect Programme Lead
Grade: 12
Background
ING Office of the CISO focuses on cybersecurity steering, threat & vulnerability management and response. We translate cyber threats, business requirements and applicable laws & legislations into architectures and accompanying enterprise-wide security programmes to achieve ING's strategic objectives, while delivering security services (e.g. SIEM, IAM, VM) to the ING organization on a global level.
The objective of the Security Strategy & Architecture department is to ensure that business strategy and cybersecurity implementations are aligned on an ongoing basis taking into account applicable technology solutions, good practices, risk appetite and cost targets.
Main activities are:
- Leading the design, providing guidance and performing verification of architecture implementation on global programmes, specifically:
- IAM and high privileged access
- Data leakage prevention
- Endpoint security
- Network security
- Security monitoring and incident response
- Defining, maintaining and verifying Enterprise Reference Architectures where needed
- Providing global security advisory on design and implementation matters
- Advisory/lead role to (security) engineers
- Advisory role in defining security standards
- Writing vision/position papers
To ensure that services and solutions as defined by security architecture are developed and effectively deployed throughout ING, CISO/Security Strategy & Architecture is looking for a Security Architecture Programme Lead with focus on network and data security.
Key Responsibilities
- Programme design
- Defining approach/methodology to develop and deploy security solutions/services
- Planning the programme in close consultation with the security architects, engineers and business stakeholders
- Supporting the development of solution/service strategy and performing impact analysis on solution/service implementations
- Formulating and testing hypotheses and drawing conclusions to determine appropriate security solutions/services for ING in a global perspective
- Programme lead
- Actively leading the programme on a daily basis
- Presenting the status to various levels and units within ING
- Organising and providing trainings, workshops, video conferences and working with international (virtual) teams on the programme
- Enforcing and verifying the correct implementation of the Global Architecture throughout the ING organisation
- Building and maintaining a sustainable network of specialists inside and outside ING
Requirements
- Proven track-record in managing complex, international programmes
- Familiar with conceptual aspects of cybersecurity, specifically on:
- Network security
- Data security
- Cloud security
- Background in exact sciences
- At least 10 years of professional experience in the field of IT, and at least 5 years in the field of programme management
- Furthermore the following personal profile:
- Ability to take ownership and responsibility
- Expertise and demonstrated track-record in driving and steering multidisciplinary teams
- Excellent analytical skills and clear way of expressing abstract concepts
- Experience in producing and presenting programme plans and status updates to management teams
- Experience in effective communication on senior management level
- Excellent writing & reporting skills in English
- Familiarity with risk/threat models, architecture concepts and their relationships
- Determination to continuously develop expertise and knowledge
- Willingness to travel (up to 10%, mainly in Europe)
