Risk Officer (Security Monitoring & SIEM)

TL;DR

Risk Officer (Security Monitoring & SIEM): Overseeing end-to-end security log onboarding into SIEM/monitoring platforms for a major Dutch bank, with an accent on security event validation, risk/waiver/deviation management, and audit-ready monitoring coverage. Focus on bridging Security Monitoring, Cyber Defence, and application/product teams to embed logging requirements into the application lifecycle and maintain governance reporting.

Location: Amstelveen, Noord-Holland

Salary: Negotiable EUR / Year

Company

hirify.global is a specialist consulting and recruitment partner supporting technology professionals.

What you will do

• Coordinate identification and validation of security events (authentication, authorization, audit logs) and onboard them into SIEM and monitoring platforms.
• Manage risks, issues, deviations, waivers, and compensating controls for missing monitoring coverage, including impact assessment.
• Serve as the primary liaison between Security Monitoring/SOC, Cyber Defence, application owners, product owners, risk & control, and architecture teams.
• Maintain dashboards and metrics for onboarding progress, monitoring coverage, and risk status; report into governance forums and audit/regulatory activities.
• Embed security monitoring requirements into the application lifecycle and drive remediation tracking and operational monitoring.

Requirements

• Solid background in Security Monitoring and SIEM solutions (e.g., Microsoft Sentinel, Splunk, QRadar).
• Working knowledge of Identity and Access Management concepts, threat detection, and SOC processes.
• Experience with IT/Security Risk Management, including issue, waiver, and deviation management.
• Familiarity with regulatory frameworks such as DORA, NIST, ISO 27001, or CIS Controls.
• Experience with cloud platforms; Azure preferred.
• Strong stakeholder management skills to bridge technical and governance conversations.

Culture & Benefits

• Work at the intersection of security, risk, and stakeholder management to improve monitoring coverage and audit readiness.
• Collaborate across Security Monitoring, Cyber Defence, architects, product owners, and application teams.
• Engage in governance and audit/regulatory reporting through dashboards, metrics, and risk status updates.