Web Security Expert

Beschreibung

We are looking for a Web Security Expert to work with our client's Web Services department, to ensure the security of their web and eCommerce sites.

Main responsibilities will include:

• Definition of security risks (consider IT Security as well as Application Security and PCI certification)
• Definition of security measures and development of a Security Framework
• Obtain approval from Security Stakeholders and manage the Security Framework evolution
• Deployment of Security Framework within the internal Web Services structure and in suppliers
• Negotiate handover of Security Framework management (compliance and reporting) to local centres. Ensure it is respected and included in the Quality Gate process
• Propose and implement frequent (if not permanent) risk assessment of productive websites and E-commerce sites
• Act as an expert to advise and guide the project managers to the select the most appropriate security solution from the available portfolio
• Initiate, plan, coordinate or contribute to Security projects

Candidates must be able to demonstrate:

• Complete understanding of E-commerce and web sites security
• Strong organisational and project management skills
• Excellent interpersonal and communication skills to successfully work with business owners and stakeholders, end users, system owners, IT specialists as well as suppliers
• Proficient analytical skills to resolve complex problems in a comprehensive and timely manner
• Fluency in both verbal and written English

As well as technical expertise in the following areas:

• TCP/IP
• Firewall, IDP, IDS
• Web Server (Specifically IIS)
• Windows OS Security
• Active Directory
• Assessment Methodology
• Encryption Technology (PKI)
• Secure Authentication, Authorization and Accounting (ACS/IAS)
• MS SQL, Oracle, Data Replication
• HTTP/HTTPS, WWW, ASP

This is a short-term contract in the first instance, with a possibility for extension at the end of 2012.