Senior Business Consultant

pAs a Senior Application Security Consultant, you help organisations integrate security throughout the Secure Software Development Lifecycle (SSDLC) while ensuring alignment with governance, risk and compliance frameworks such as NIS2, DORA, ISO/IEC 27001 and OWASP ASVS. You combine deep application security expertise with strong advisory capabilities and can translate technical risks into business-oriented recommendations. /p h3Key Responsibilities /h3 ul liLead Application Security Assessments and Secure Architecture Reviews. /li liFacilitate Threat Modelling and Architectural Risk Assessments (ARA). /li liSupport the implementation and continuous improvement of SSDLC and DevSecOps practices. /li liDefine and review secure coding standards and security requirements. /li liAssess applications against OWASP ASVS and other recognised standards. /li liAdvise development teams, architects and business stakeholders on secure design. /li liContribute to application security governance, policies and roadmaps. /li /ul h3Required Technical Expertise /h3 ul liOWASP ASVS, OWASP Top 10, OWASP SAMM /li liRisk Assessments (FAIR or an equivalent industry-recognized risk assessment framework) /li liSecure Software Development Lifecycle (SSDLC) /li liApplication Security Architecture /li liAPI Security /li liDevSecOps and CI/CD Security /li liCloud Security (Azure and/or AWS) /li liIdentity Access Management. /li liNIS2 /li liDORA /li liISO/IEC 27001 /li liISO 27005 /li liNIST Cybersecurity Framework /li liNIST SP 800-218 (SSDF) /li liFAIR (preferred) /li liCIS Controls. /li /ul h3Professional Experience /h3 ul liExtensive professional experience in Cyber Security. /li liMinimum 4 years in Application Security. /li liExperience leading customer engagements and workshops. /li liExperience producing executive-level reports and recommendations. /li /ul h3Preferred Certifications /h3 ul liCISSP /li liCSSLP /li liCRISC /li liISO/IEC 27001 Lead Implementer or Lead Auditor /li liCloud security certification (Azure or AWS). /li /ul h3Soft Skills /h3 ul liStrong analytical and strategic thinking. /li liHigh learning agility and curiosity. /li liQuality-oriented and systematic problem solver. /li liCollaborative, influential and diplomatic. /li liHigh integrity and resilience. /li liStrong planning, organisation and self-management. /li liWorkshop facilitation. /li liCoaching and mentoring mindset. /li /ul h3Key Motivators /h3 ul liSolving complex security challenges. /li liAdvising customers and influencing strategic decisions. /li liWorking autonomously while collaborating in multidisciplinary teams. /li /ul h3Success Criteria (first 12 months) /h3 ul liLead multiple Application Security and Architecture Risk Assessments. /li liSupport customers in strengthening their SSDLC and DevSecOps capabilities. /liliDeliver governance and compliance recommendations aligned with NIS2, DORA and ISO/IEC 27001. /li liBecome a trusted advisor for application security and GRC topics. /li /ul h3What you can expect from us: /h3 ul libBe taken care of
- /bWe offer you 32 vacation days (with the option to make it a whopping 37 days with our Benefit Motivation Plan), meal vouchers, eco-cheques, hospitalization and group insurance, company laptop, mobile phone with unlimited use as well as other benefits. So you do not have to worry about a thing /li libNever stop learning
- /bWe want to be the best in what we do and therefore we provide training, certifications and learning opportunities for every employee so you continuously enrich your skills. /li libTransparency
- /bCommunication is key So we organize company and team meetings on a regular base so everyone is informed properly. /li libDo what you love
- /bEnjoy flexibility with offices in Brussels, Antwerp, Ghent Rotselaar, a variety of events and lots of activities. We spend more time at work then we do at home, that is why it is important that everyone feels at home. And we make sure you do /li libSnack to your heart's desire
- /bAt Orange Cyberdefense we keep it healthy. So, you can enjoy an assortment of fresh fruit and healthy snacks. For those with an occasionally sugar dip, there are sweet snacks available. /li libReputable brand
- /bYou will join an internationally, growing company with over 25 years’ experience in the industry. This makes us experts in what we do. We have an international presence and yet local teams to assist our customers. /li libThe good life ... /b /li /ul pOrange Cyberdefense are equal opportunities employer, welcoming applications from all people, regardless of their race, sex, disability, age, religion, or sexual orientation. /p