PRIMARY ROLE
The following tasks are the main ones (but not limited) to the role :
1. Familiarise and lead the pen test plan for baseline and project pen tests
2. Plan pen tests by quarter and complete required deliverables as required (scoping, SOWs, etc)
3. Work and interact with Application owners to plan and implement tests as needed
4. Work with the Scrum Master for the pen test area to ensure planned tests are factored and agreed such that the necessary PBIs for application owners is in place
5. Lead the complete lifecycle of a pen test from start to completion
6. Work with the third parties to plan resources and costs accordingly
7. Work with the pen test team and the technical people to look at ways to improve the testing in the following areas : -
8. Coverage
9. Efficiency of tests (combine SAST & DAST testing with pen test to increase the testing process)
10. Look at ways of automating processes, requests and deliverables to increase efficiency (you are not expected to write the scripts or whatever; just to find opportunities
11. Run the tri-weekly meetings with the team to handle issues, align tasks and manage resources
12. Work with Applications owners for :
13. Plan tests for the annual baselines and for the quarter pen tests
14. Providing the Intake forms, infra availability, results delivery and I-track allocation
15. Escalate application owners who fail to deliver the required inputs in time to support planned pen tests
16. Work with Third party Providers to
17. Plan annual pen tests and resources needed
18. Work out any issues arising
19. Provide the Statements of Work and agree the scope
20. Achieve sign-off from 3rd parties to provide the accurate resources and costs that have been agreed
21. Work with management to :
22. Support the reporting of the pen tests and the information needed to support any monthly or quarterly reporting
23. Appraise of any issues and request support where these issues will prevent the execution of a test or tests
24. Provide a forecast and actuals on a monthly basis to track progress.
ABOUT US
Why join us
Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.
WHAT WE OFFER :
NEW WAYS OF WORKING
Find your own optimal balance within our hybrid working model, where you can connect at the office and also benefit from remote working.
GREAT PLACE TO WORK FOR ALL
We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, . If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.
ABOUT THE TEAM
As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the companys' business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to adequately and effectively protect our information assets.
Information Security • Netherlands