The company is heavily R&D driven, and as such, it is critical that intellectual property is duely safeguarded. As an information security manager, you will manage information security risks within the R&D domain, which is a challenging position in an intellectual property-driven enterprise.

Throughout the company multiple disciplines are required to ensure proper identification, mitigation and management of these risks.

R&D Security Risk Management (SRM) operates within the R&D domain, which includes Development & Engineering, System Engineering and all Business Lines. R&D SRM is responsible for keeping information security risks within the R&D risk appetite by identifying and assessing risks, driving risk mitigation and monitoring execution.

This role focuses on anomaly detection in the R&D domain by amongst others drive the anomaly detection capability improvements in information systems and processes. Besides this domain you will be expected to also perform/assist in generic security risk assessments and support the SRM department as a whole.

Key responsibilities:

• Identify, advice on logging and monitoring requirements for R&D applications.
• Drive implementation of centralized activity logging;
• Together with R&D cluster security risk managers and business stakeholders, define monitoring use-cases;
• Use big-data analytics methodologies to create anomaly detection models and reports, and validate their effectiveness;
• Security event correlation;
• Embed logging and monitoring in existing processes;
• Align with the application security team, IT operations teams, the privacy office and the Cyber Defense Center;
• Ensure compliance to privacy and security policies and standards;
• Contribute to improving means and methods related to focus domains.