IT Security Consultant

Do you have experience in process description, project management, risk management, or crisis management within an organization? Are you familiar with the workings of a public institution? Do you want to play a key role at the heart of the strategy and support of an information system and an organization?

Your mission

Implementation of IT security focused on the protection of information, computers, networks, and other digital systems.

You are responsible for identifying incidents that could impact the activities of ONE.

You assess the impact of these incidents and participate in the Business Continuity Plan (BCP) in order to proactively and reactively manage these incidents together with all business units and the executive body of ONE.

You are integrated into the operations team of the Information Technology Department.

You support, representing IT operations, the operational services in the execution of the IT security plan, working closely with the DPO, the CISO, and the crisis management coordinator of ONE.

You regularly ensure that security assessments are carried out and, where appropriate, that improvement plans are proposed at the level of internal processes.

You organize necessary training for the relevant internal parties, you are responsible for organizing exercises and tests, in collaboration with the teams of the Information Technology Department, the business units, as well as the digital governance unit.

You provide advice and recommendations, participate in projects and working groups related to IT security.

Your profile

• You have experience in risk management.
• You have experience in risk analysis in a company and/or in managing an information system.
• You have experience in project management (development, execution, and evaluation).
• You have experience in process management and mapping.
• You have experience in crisis management within the context of incident management.

Assets

• Operational and functional knowledge of the workings of a public organization is a plus.

• Knowledge of standards:

• ISO 22301:2019: Security and resilience — Business continuity management systems — Requirements

• IEC 31010:2019: Risk management — Risk assessment techniques
• Risk management — Risk assessment techniques

Behavioral competencies

• You conduct analyses based on the context and draw the appropriate conclusions.
• You make decisions based on (in)complete information and initiate targeted actions to implement the decisions together with your partners.
• You support internal and external clients in a transparent, honest, and objective manner, provide them with personalized service, and maintain collaborative and constructive contacts.
• You act with integrity, in accordance with the expectations of the institution, respect confidentiality and commitments, and avoid any form of bias.
• You are committed and show willingness and ambition to achieve results and take responsibility for the quality of the actions undertaken (goal-oriented).
• You create and enhance team spirit by sharing your opinions and ideas and contributing to conflict resolution among stakeholders in a complex environment.
• You provide advice to your contacts and develop a relationship of trust with them based on your expertise.

Conflicts of Interest

The concept of conflict of interest covers any situation in which, during the awarding or execution of a contract, any person connected in any way to a contracting authority, as well as any person who may influence the awarding or outcome thereof, has directly or indirectly a financial, economic, or other personal interest that could be perceived as compromising their impartiality or independence in the context of the awarding or execution.

A conflict of interest is in any case presumed:

1. As soon as there is kinship or relationship by marriage, in a direct line up to the third degree and, in a collateral line, up to the fourth degree, or in the case of legal cohabitation, between the natural person and one of the candidates or bidders or any other natural person who acts on behalf of one of them with a power of representation, decision, or control;

2. The natural person is, himself or through an intermediary, owner, co-owner, or active partner of one of the candidate or bidding companies or exercises, by law or in fact, himself or, if necessary, through an intermediary, a power of representation, decision, or control.

A conflict of interest is considered to exist in any situation where a natural person who has worked for a contracting authority as an internal collaborator, whether in a hierarchical relationship or not, as a concerned official, public officer, or any other person linked to a contracting authority in any way, subsequently intervenes in the context of a public contract/call for projects awarded by this contracting authority and a link exists between the previous activities that the person has performed for the contracting authority and their activities within the framework of the contract/call for projects.

The application of this provision is, however, limited to a period of two years following the resignation of said person or any other way of ending their previous activities.

This provision gives the contracting authority, duly informed by the service provider, after verification of the situation, the possibility to terminate the contract/project assigned to the said provider without compensation. During these verifications, particular consideration will be given to the information and justifications obtained from the person concerned.

In the event of termination, a statement of the services performed will be drawn up for their payment to the service provider. In case of violation (for example, if the provider does not disclose the conflict situation), the finding by the contracting authority may result in the nullity of the contract/project.

If no justification is provided at the request of the contracting authority, the provider will not be entitled to any payment for services performed after the moment they should have become aware of the incompatibility.

For the purposes of the contract/project, the contracting authority may freely use the studies, reports, etc., prepared by the provider in execution of the contract/project.

It may also exclude the provider from its contracts/calls for projects for a determined period.