The Organization
Our client provides integrated, secure and customized business communication solutions for Multi-National Companies and large national customers. The company designs, builds and maintains converged IP networks, supported by the world’s largest IP VPN and by global capabilities in managed and outsourced services. The organization provides packaged voice, data, video and mobility solutions. Growth focus includes:
- Cyber Defense
- Internet of Things
- Cloud Computing Services
- Software Defined Networks
The Position
The Information Security Management & Risk Consultant is responsible to provide IT Security and Compliancy solutions for bids enabling to win profitable bids maximizing Security and Compliancy strengths while leveraging internal IT controls, audit rules and compliancy risks throughout the sales life cycle from lead generation (adaptation to different customer’s approaches), sales & risk mitigation strategies and hand-over to operations.
Key metrics
- Winning proposals balancing costs, internal IT controls, audit rules and compliance risks fulfilling customer requirements
- Satisfaction of customers and bid team (Account team, Solution Director, Commercial, and product experts) providing excellent deliverables on time
- Validation of solutions with customers and internal stakeholders
- Satisfaction of hand-over to operational teams
The Candidate
Responsibilities
- Understand Orange Information Security Management and Quality capabilities
- Develop Security & Compliancy market knowledge to differentiate Orange proposal from competition
- Understand and influence customer Security & Compliancy requirements
- Develop profitable and successful Security & Compliancy proposals
- Validate customized solution with internal stakeholders (Corporate resources, Legal teams, Security Officers)
- Manage Hand Over To Operation and contribute in post-sales implementation of new services whenever required
- Contribute to best practice sharing
- Capitalize on good knowledge management tools and processes
- Interface with Corporate Security and Compliancy team, Regional Security Officer and community, Product managers, Legal to influence standard and capabilities
- Participation in Security community meetings
- Represent presales on Security & Compliancy matters
- Spread Security & Compliancy awareness throughout Sales & Marketing Europe
- Engage in deal generation
- Engage in opportunities qualification
Skills/Experience/Qualifications
- Excellent English spoken and writing skills
- Excellent presentation skills
- > 15 years on Security and Compliancy on Information Security matters
- > 10 years in consultative selling positions
- > 5 years writing information security and audit contract clauses between large corporations
- > 2 years Performing Internal Security and Compliance audits
- Strong management of priority and time, ability to work under stress on tight deadlines
- Sound commercial experience, ability to balance cost, quality and risks
- Ability to build trusted relationships with customer, suppliers and within organization
- Hands on Project Management experience
- CISSP (ISC2.org) or CISM (ISACA.org) certification
- ITIL and ISO 20k certified
- ISO 27001 / ISA – 3402 experience as an auditor and reviewing audit reporting
- Practical experience working with customers to address standards of SOX, BaFin, FSA, FDA-CFR, GAMP, GxP, EU data protection (writing and defining TOMs), CoBIT controls, PCI-DSS, COSO governance models.
- Risk management and mitigation ISO 27005 / 31000
- Free to travel in Europe at short notice and for extended periods