Security Analyst SaaS

We have about 60 SaaS applications at the DevOps SaaS team, with regular replacements and updates taking place. This means that there is a wide variety of vendors that we work with. All applications must comply to the NN regulations on security, to make sure that data is safe and nobody but the authorized persons can access the data. As NN we are responsible for the security of the data.

Your role is to work on the security of the SaaS applications. You make sure that application vendors supply NN with the right information concerning IT security. You supply our Procurement department with information for setting up contracts. And you take it a step further, because you also assess the results of security tests and you take action on any findings.

With everything that you do, you make sure everything is properly documented, so you share this with vendors and internal stakeholders, such as the colleagues from Risk, HR and Compliance. They are also the end users of the applications. Whatever functional or technical incident or upgrade is happening, you are on top of it and you bring the parties together to work together.

• You will take care that all applications comply to the NN security requirements
• You will be in regular contact with the SaaS vendors, discussing solutions and exchanging documentation. You will maintain good relations with the vendors
• Every year and after major changes you will validate the SaaS IT security
• You will be introducing new SaaS solutions in the NN IT landscape
• You will be an advisor on IT Security

You can see it clearly: a career as security expert. So you like to dive into the developments at NN and like to learn everything that there is to know about this subject. Thanks to your analytical skills you don’t miss any detail. You take the steps to get to solutions. You don’t miss a deadline, because you structure and plan your work.

• A bachelor or Master degree in IT or Security and 1 or 2 years security experience
• You are intrinsically motivated to work on IT Security
• You have knowledge of the ISO27001 framework and knowledge of SOC2 reports
• Preferably you are also CISSP or CISM certified
• Preferably you also ITIL4 certified
• You have strong communication skills
• You have strong English language skills, both verbally and written

We think it is important that you keep developing. We provide you with room and trust to grow in your career and as a person. We help you with this by providing:

• Lots of training and education opportunities in our Learning & Development Centre
• A large (international) network of colleagues who like to share their knowledge with you
• The autonomy to decide on your own development path

You will work in a great (DevOps Scrum) team of, at this moment, 8 colleagues. That can sound a bit more technical than it really is, because we do not develop any software and the technical daily operations is the responsibility of external vendors. Our team has one Product Owner (we work Agile) and seven other Analysts. We collaborate closely, because we take on all activities in pairs. This way we help each other and we learn from each other. Our expertise is famous in the organization, so colleagues know how to find us. We are a very diverse team if you look at age, experiences and passions. We work hard, but we combine that with time for fun, such as having dinner and going to an escape room!

• Individual budget for your education
• Design office in the Anděl, in the very center of Prague
• Home office
• Space for your projects - 3D printer and laboratory also for your private use
• Other benefits such as language courses, iPhone 11, MultiSport Card, Cafeteria program, Home office allowance…

Are you enthusiastic about this position and do you think you fit in the team and NN? In that case, please apply to this position. We are curious who you are, what drives you and what you can contribute in this position to NN.