Senior Business Consultant

ph3Position summary /h3pAs a Senior Business Consultant
- Cybersecurity, you help organisations integrate security throughout the Secure Software Development Lifecycle (SSDLC) while ensuring alignment with governance, risk and compliance frameworks such as NIS2, DORA, ISO/IEC 27001 and OWASP ASVS. You combine deep application security expertise with strong advisory capabilities and can translate technical risks into business-oriented recommendations. /ph3Key Responsibilities /h3ulliLead Application Security Assessments and Secure Architecture Reviews. /liliFacilitate Threat Modelling and Architectural Risk Assessments (ARA). /liliSupport the implementation and continuous improvement of SSDLC and DevSecOps practices. /liliDefine and review secure coding standards and security requirements. /liliAssess applications against OWASP ASVS and other recognised standards. /liliAdvise development teams, architects and business stakeholders on secure design. /liliContribute to application security governance, policies and roadmaps. /li /ulh3Required Technical Expertise /h3ulliOWASP ASVS, OWASP Top 10, OWASP SAMM /liliThreat Modelling (STRIDE) /liliRisk Assessments (FAIR or an equivalent industry-recognized risk assessment framework) /liliSecure Software Development Lifecycle (SSDLC) /liliApplication Security Architecture /liliAPI Security /liliDevSecOps and CI/CD Security /liliCloud Security (Azure and/or AWS) /liliIdentity Access Management. /li /ulh3Governance, Risk Compliance /h3ulliNIS2 /liliDORA /liliISO/IEC 27001 /liliISO 27005 /liliNIST Cybersecurity Framework /liliNIST SP 800-218 (SSDF) /liliFAIR (preferred) /liliCIS Controls. /li /ulh3Professional Experience /h3ulliExtensive professional experience in Cyber Security. /liliMinimum 4 years in Application Security. /liliExperience leading customer engagements and workshops. /liliExperience producing executive-level reports and recommendations. /li /ulh3Preferred Certifications /h3ulliCISSP /liliCSSLP /liliCRISC /liliISO/IEC 27001 Lead Implementer or Lead Auditor /liliCloud security certification (Azure or AWS). /li /ulh3Soft Skills /h3ulliStrong analytical and strategic thinking. /liliHigh learning agility and curiosity. /liliQuality-oriented and systematic problem solver. /liliCollaborative, influential and diplomatic. /liliHigh integrity and resilience. /liliStrong planning, organisation and self-management. /liliExcellent written and verbal communication. /liliExecutive presentation skills. /liliWorkshop facilitation. /liliStakeholder management. /liliCoaching and mentoring mindset. /liliCommercial awareness. /li /ulh3Key Motivators /h3ulliSolving complex security challenges. /liliContinuous professional development. /liliAdvising customers and influencing strategic decisions. /liliWorking autonomously while collaborating in multidisciplinary teams. /li /ulh3Success Criteria (first 12 months) /h3ulliLead multiple Application Security and Architecture Risk Assessments. /liliSupport customers in strengthening their SSDLC and DevSecOps capabilities. /liliDeliver governance and compliance recommendations aligned with NIS2, DORA and ISO/IEC 27001. /liliBecome a trusted advisor for application security and GRC topics. /li /ulh3What you can expect from us: /h3ullipbBe taken care of
- /bWe offer you 32 vacation days (with the option to make it a whopping 37 days with our Benefit Motivation Plan :-)), meal vouchers, eco-cheques, hospitalization and group insurance, company laptop, mobile phone with unlimited use as well as other benefits. So you do not have to worry about a thing /p /lilipbNever stop learning
- /bWe want to be the best in what we do and therefore we provide training, certifications and learning opportunities for every employee so you continuously enrich your skills. /p /lilipbTransparency
- /bCommunication is key So we organize company and team meetings on a regular base so everyone is informed properly. /p /lilipbDo what you love
- /bEnjoy flexibility with offices in Brussels, Antwerp, Ghent Rotselaar, a variety of events and lots of activities. We spend more time at work then we do at home, that is why it is important that everyone feels at home. /pAnd we make sure you do /lilipbSnack to your heart's desire
- /bAt Orange Cyberdefense we keep it healthy. So, you can enjoy an assortment of fresh fruit and healthy snacks. For those with an occasionally sugar dip, there are sweet snacks available. /p /lilipbReputable brand
- /bYou will join an internationally, growing company with over 25 years’ experience in the industry. This makes us experts in what we do. We have an international presence and yet local teams to assist our customers. /p /lilibThe good life ... /b /li /ulpbOrange Cyberdefense are equal opportunities employer, welcoming applications from all people, regardless of their race, sex, disability, age, religion, or sexual orientation. /b /ppChez Orange, seules vos compétences comptent. /ppQuel que soit votre âge, genre, origine,