- Be 'the driving force' for managing the applications in his/her scope, covering organizational responsibilities such as preparing meetings with vendors and internal stakeholders; setting up and maintaining a good governance structure to keep track of performance; anticipate on developments; know how and when to escalate and to feedback key messages towards both vendors and client's stakeholders.
- Ensure that the necessary IT risk related activities (such as verification and providing documentation for vulnerability scanning, threat assessment, security event monitoring, etc.) are timely performed .
- Assess certificates (like ISO) and Service Organization Control (SOC)/Audit reports, received from 3rd party, involving 1st Line of Defence Risk and prepares a concluding in control statement to be approved by 1st/2nd Line of Defence Risk and Asset Owner
- Identify and resolving problems both as a result of incidents and for continuous improvements.
- Ensure that all hardware and software within the system is suitably up to date, patched, supportable, secured and that application monitoring complies with client's standards and policies.
- Report incidents to 3rd party, provides 2nd line support, monitors progress of 3rd line support of 3rd party on high priority incidents and escalates timely when applicable. In case of incidents on client side (e.g. interfaces, configurations) you may in addition solve the incidents yourself.
- Act as single point of contact for incidents and provides urgency and impact (priority) to the 3rd party.
- Act as single point of contact for incidents and provides urgency and impact (priority) to the 3rd party together with 3rd party) and takes/coordinates appropriate actions.
- Align with 3rd party on release planning and arranges client's response, test, communication on new (SaaS) releases and patches, where needed
- Verify that the client's configured parts are still adequate after a new release
- Continuously improve the automation of testing.
- Determine impact of new/changed client's standards and policies.
- Conduct accurate maintenance of application components in the Configuration Management Database (CMDB)