TenneT

Of course you have knowledge of service management processes according to ITIL, in particular for information security management, but next to that you have an independent and analytical approach of tasks and a high level of communication skills. 

Furthermore: 

• Several years of professional experience in the field of Information security/cybersecurity of modern Workspace environments in the cloud.
• Several years of professional experience in the Operations and Maintenance of modern Workspace environments in the cloud.
• Professional experience in the analysis and evaluation of Information security risks and knowledge of security assurance standards like ISO2700x, ISAE3402 SOC2 and such.
• A recognized information security certification is required (e.g. CISM or CISSP).
• Experience in the area of Data Protection is a plus. Prepare, assist and contribute to Data Protection Impact Assessments in order to identify the risks associated with the processing of Personal Identifiable Information.

*** Willingness to travel to different TenneT locations in Germany and the Netherlands.

In the field of information security, providing support for Datacenter and Hosting services in the context of projects, change initiatives and daily operations and maintenance activities for the TenneT Workspace in the cloud you will be responsible for managing design, implementation and operations of security control measures and the periodic testing/verification of the effectiveness of these measures. You will assist the process of detecting, logging, assessing and managing the follow-up of Security Related Events or Security Related Incidents. Periodic you will be in charge of the verification of Audit Logging for anomalies and reporting on security posture of the TenneT Workspace in the cloud.

Other tasks will consist of:
 
Maintaining close cooperation with the internal customer departments (Business) by:
o Creating awareness and promoting information security and privacy protection using the TenneT Workspace in the cloud.
o Create and maintain user documentation of the information security controls.
o Providing support to key-users in the operationalisation and realisation of compliance with the information security policy.

Maintaining close cooperation with the Cloud Service Provider and Cloud Service Integrator by;
o Acting as a product owner in the Agile collaboration with stakeholders.
o Providing support to suppliers in the realisation of compliance with the information security policy, regulatory and legal requirements.
o Support in ISO27001 audits and the processing of audit findings.
o Create Security Waivers and submit it to the service management for decision, together  with an advice on follow-up.

All this in alignment with the responsible service managers and SOC.