Senior Application Security Specialist DORA

You are an experienced (application) security specialist who is able to maintain a clear overview and can present and communicate to management and larger groups of colleagues. You are leading on content and contribution and set the bar for application security. You are leading towards your teammates and coach them to learn. You create an overview across our estate.

You have extensive experience with all aspects of application security and have supported application migration, transition and re-platforming before. You are able to perform a security review of vendor contracts e.g. for SaaS, COTS applications, etc. You understand the balance between technical security measures and potential organizational mitigating measures. You perform security assessment and threat modelling of the applications in the bank including capture of CISO risk opinion for the deviations or issues identified. You identify application security themes across our estate and push for continuous improvement. You perform well under pressure.  

You are able to entice colleagues with your ideas. This means you can easily convince people and transpose technical jargons into understandable language effortlessly. 

With the following results (SMART)         
Threat model of the assigned application is stored in the organization’s threat modelling repository
Security Assessment is performed by identifying security gaps and those gaps are registered in the GRC tool of the organization in timely manner
When the DORA contract deviations assessment is performed by identifying security gaps and those gaps are registered in the timely manner (as prescribed within the process)