Cyber Security Design consultant PAM - Freelance

Pour un acteur de l'assurance

Contexte

We are looking for the service of a general Senior Cyber Security Design consultant, with expertise in the broad field of Cyber Defense product portfolio. The goal is to create and execute Cyber Defense data center migration plans together with a project manager and product teams, as part of a major program.

Missions

The Service will do the following (as part of the CD OneDC project team), in service with the product teams and project manager
Deliverables:
• Assure there are service availability monitoring criteria/plans for the products
• Assure there is a test-plan to validate the functionality of the services during the migration steps
• Identification of the dependencies of the Cyber Defense products and services
• Support the update (creation) of the post migration Low Level Design
• Support the (technical) migration of existing Cyber Defense product portfolio into our new virtualized data centers
• Structure/enrich the project backlog (and execute your deliverables)
• Servicing in the project architectural and product governance
• Co-create communication sessions with the stakeholders or expertise teams
• Lead the technical security architecture for Cyber Defense service migration plans (Belgium and Germany to France)
• Define multiple options, including the pros and cons of the options
• Explain the pros and cons of service consolidation (including the technical, organizational and financial impact)
• Service with the project manager to create a realistic migration plan (including the estimated)
• Assure that the migration plans work in the context / technical environments
• Service with cross-functional teams to ensure seamless migration without compromising security
• Service with product teams to define the requirements and address them in the migration plans
• Realize opportunities for improved standardization of architecture patterns and solutions.

Profil recherché

Technical Expertise (ability to have senior conversations about):
• General overview of information security concepts, risk assessments, cyber defense technology and security architecture
• Privileged Access Management (PAM) solutions and best practices (e.g., CyberArk, Thycotic)
• Password Complexity checkers
• Hardware Security Modules (e.g. nCipher, Thales , Utimaco SecurityServer, YubiHSM)
• DLP Solutions (e.g. Forcepoint, Microsoft, Teramind)
• Antivirus solutions (e.g., CrowdStrike, Sentinel-One, Symantec, Microsoft Defender for End-Point), covering Endpoint, gateway and storage
• Network Security like IPS, Firewall, DDOS protection, Secure Web Gateway, Shadow Cloud monitoring, Secure Email Gateway, Web Application Firewall (e.g., Cisco Firepower, Palo Alto Networks, Fortinet, SkyHigh, Z-Scaler)
• Security Operations Center (SOC) – Log Collection (e.g. ArcSight, Sentinel, AMA, Beats, Cribl)
• Troubleshooting expertise for operating system and network issues

Non-Technical Expertise a:
• Expertise to make a planning, and support other people in achieving it
• Identify gaps, limitations, opportunities for improvement
• Strong customer focus and service orientation
• Strong presentation expertise to different levels of stake holders both management and technical
• English environment – a good level of English is mandatory, other languages are appreciated
• Expertise to service in a diverse, inclusive and international environment