Officer, Cyber Security Audit

Brussels - Belgium

Monthly Salary: Not Disclosed

Posted on: 23 hours ago

Vacancies: 1 Vacancy

Job Summary

**Through this competition we are also aiming to select a potential candidate for a post Security Accreditor Classified Communication and Information Systems (CIS) G15/G17 (pending budget approval) **
Please find description of the above mentioned post here:

The Joint Intelligence and Security (JIS) Division under the leadership of the Assistant Secretary General (ASG) for Intelligence and Security comprises two principal pillars: Intelligence headed by the Deputy ASG for Intelligence (DASG-I); and the NATO Office of Security (NOS) headed by the Deputy ASG for Security (DASG-S) / Director NOS.

The NOS is responsible for the overall coordination of NATO security among member Nations NATO civil and military bodies as well as International Organisations and partner countries with which NATO cooperates. It is also responsible for the security of the NATO Headquarters (HQ) and its personnel in Brussels for the protection of the Secretary General and for the security and safety of its personnel in and on missions abroad. The NOS comprises the Office of the Director the Security and Policy Oversight Branch (SPOB) the Protective Security and Emergency Services Branch (PSESB) the Close Protection Unit (CPU) and the Security Intelligence Branch (SIB).

The SPOB is responsible for ensuring that NATO Security Policy is applied throughout NATO bodies and member Nations and as well as in non-NATO Nations and organisations as appropriate with which NATO cooperates. JISD/NOS/SPOB develops security policy and directives supports their implementation and verifies compliance through security audits in the specific functional areas of personnel security physical security security of information communication and information systems security (CIS Security also known as Cyber Security) and industrial and protective security. JISD/NOS/SPOB works with the other JISD branches to ensure coordinated and consistent responses to the interpretation and practical application of policy.

Within the JISD/NOS/SPOB the Cyber Security Section delivers the following three key functions: (i) security accreditation of NATO CIS (ii) security inspections and surveys in nations and other NATO or non-NATO entities as well as (iii) maintenance and development of CIS-related security policies and directives.

The incumbent under the direction of the Section Head will be responsible inter alia for security accreditation of NATO CIS according to NATOs Security Policy as well as for the maintenance of the Cyber Security policy framework. They will also carry out the Cyber Security audits in NATO bodies as well as security surveys in non-NATO entities.

2. QUALIFICATIONS AND EXPERIENCE
ESSENTIAL
The incumbent must:

possess a university degree or an equivalent level of qualification in cyber security information systems or relevant scientific discipline;
have 5 years of experience within a large organisation in a cyber security role preferably in an Industry an International Organisation or a National Security Authority;
possess a thorough understanding of Cyber Security international standards and best practices;
demonstrate experience in Cloud Edge Fog Computing and its deployment models;
have a deep understanding in one of the following concepts: DevSecOps Artificial Intelligence Zero Trust or Data Centric Security;
have proven experience in vulnerability assessments and penetration testing;
demonstrate excellent written skills and the ability to draft clear and concise policies and reports in particular the ability to present complex CIS security issues in simple terms in order to facilitate consensus and decision-making at the highest governance and management levels;
demonstrate mature judgement political sensitivity and the ability to instil confidence in their direct dealings with senior civilian and military officials;
possess the following minimum levels of NATOs official languages (English/French): V (Advanced) in one; I (Beginner) in the other;
be prepared to work outside normal office hours and travel extensively as required occasionally on short-notice.

DESIRABLE
The following would be considered an advantage:

experience in incident handling and knowledge of cyber forensics procedures;
experience in the area of Security Risk Assessment/Management (SRA/SRM);
have a deep understanding in several of the following concepts: DevSecOps Artificial Intelligence Zero Trust Data Centric Security Software-Defined Networking and Service Oriented Architecture;
knowledge of threat hunting and purple team techniques and principles;
knowledge of project and programme management; and
professional certification(s) in Cyber security.

3. MAIN ACCOUNTABILITIES
Project Management
Carry out and coordinate security audits for NATO CIS as directed by the Section Head. Conduct security evaluations for NATO CIS services and advise/coordinate the planning and implementation of Cyber Security provisions in NATO-wide projects including the involvement of industry in those projects. Assist the other NOS branches and divisions in NATO Headquarters in assessing the Cyber Security posture of NATO networks. Participate in NOS security surveys with particular reference to Cyber Security in partner nations and international organisations.

Expertise Development
Provide Cyber Security advice and guidance to NATO Nations NATO civil and military bodies and partner nations and international organisations. Proactively keep up-to-date with the latest cyber security trends and technologies. Orchestrate the education and training efforts on security accreditation towards relevant stakeholders.

Knowledge Management
Based on briefings discussions and investigations assess the security programmes in place in NATO nations NATO civil and military bodies and non-NATO nations / international organisations. Maintain an Information and Knowledge Repository for increased situational awareness. Support Education and Training sessions on Cyber Security and Security Accreditation for a NATO-wide audience and industry.

Policy Development
Draft policy directive and guidance documents on Cyber Security as required.

Stakeholder Management
Mediate between diverse stakeholder with different interests such as CIS Operational Authorities CIS Planning and Implementation Authorities CIS Providers and CIS Security Officers. Write comprehensive reports for use by the responsible national and/or security authorities.

Representation of the Organization
Represent the NOS on security accreditation and Cyber Security related boards committees and working groups as directed by the Head Cyber Security.
Perform any other related duty as assigned.

The incumbent reports to the Head Cyber Security in the JISD/NOS/SPOB and will deal with senior government and military personnel in NATO and partner nations NATO civil and military bodies and in non-NATO nations and organisations.
Direct reports: N/A
Indirect reports: N/A.

The incumbent must demonstrate:
Achievement: Creates own measures of excellence and improves performance;
Analytical Thinking: Sees multiple relationships;
Change Leadership: Expresses vision for change;
Impact and Influence: Uses indirect influence;
Initiative: Is decisive in a time-sensitive situation;
Organisational Awareness: Understands organisational politics;
Teamwork: Solicits inputs and encourages others.

6. CONTRACT

Contract to be offered to the successful applicant (if non-seconded): Definite duration contract of three years; possibility of renewal for up to three years during which the incumbent may apply for conversion to an indefinite duration contract.

Contract clause applicable:

In accordance with the contract policy this is a post in which turnover is desirable for political reasons in order to be able to accommodate the Organisations need to carry out its tasks as mandated by the Nations in a changing environment for example by maintaining the flexibility necessary to shape the Organisations skills profile and to ensure appropriate international diversity.

The maximum period of service foreseen in this post is 6 years. The successful applicant will be offered a 3-year definite duration contract which may be renewed for a further period of up to 3 years. However according to the procedure described in the contract policy the incumbent may apply for conversion to an indefinite contract during the period of renewal and no later than one year before the end of contract.

If the successful applicant is seconded from the national administration of one of NATOs member States a 3-year definite duration contract will be offered which may be renewed for a further period of up to 3 years subject also to the agreement of the national authority concerned. The maximum period of service in the post as a seconded staff member is six years.

Serving staff will be offered a contract in accordance with the NATO Civilian Personnel Régulations.

NOTE:Irrespective of previous qualifications and experience candidates for twin-graded posts will be appointed at the lower grade. Advancement to the higher grade is not automatic and will not normally take place during the first three years of service in the post.

Under specific circumstances serving staff members may be appointed directly to the higher grade and a period of three years might be reduced by up to twenty four months for external candidates. These circumstances are described in the IS directive on twin-graded posts.

7. USEFUL INFORMATION REGARDING APPLICATION AND RECRUITMENT PROCESS

Please note that we can only accept applications from nationals of NATO member must be submitted using e-recruitment system as applicable:

For NATO civilian staff members only: please apply via the internal recruitment portal (link);
For all other applications: you apply to any position we encourage you to click here and watch our video providing 6 tips to prepare you for your application and recruitment process.
Do you have questions on the application process in the system and not sure how to proceed Click here for a video containing the information you need to successfully submit your application on time.
More information about the recruitment process and conditions of employment can be found at our website ( will be subject to receipt of asecurity clearance(provided by the national Authorities of the selected candidate) approval of the candidatesmedical fileby the NATO Medical Adviser verification of your study(ies) and work experience and the successful completion of theaccreditationand notification process by the relevant authorities.
NATO will not accept any phase of the recruitment and selection prepared in whole or in part by means of generative artificial-intelligence (AI) tools including and without limitation to chatbots such as Chat Generative Pre-trained Transformer (Chat GPT) or other language generating tools. NATO reserves the right to screen applications to identify the use of such tools. All applications prepared in whole or in part by means of such generative or creative AI applications may be rejected without further consideration at NATOs sole discretion and NATO reserves the right to take further steps in such cases as appropriate.
8. ADDITIONAL INFORMATION
NATO is committed to diversity and inclusion and strives to provide equal access to employment advancement and retention independent of gender age nationality ethnic origin religion or belief cultural background sexual orientation and disability. NATO welcomes applications of nationals from all member Nations and strongly encourages women to apply.
NATO is committed to fostering an inclusive and accessible working environment where all candidates living with disabilities can fully participate in the recruitment and selection process. If you require reasonable accommodation please inform us during your selection process.
Candidates will be required to provide documented medical evidence to support their request for accommodation.
Building Integrity is a key element of NATOs core tasks. As an employer NATO values commitment to the principles of integrity transparency and accountability in accordance with international norms and practices established for the defence and related security sector. Selected candidates are expected to be role models of integrity and to promote good governance through ongoing efforts in their work.
Due to the broad interest in NATO and the large number of potential candidates telephone or e-mail enquiries cannot be dealt with.
Applicants who are not successful in this competition may be offered an appointment to another post of a similar nature albeit at the same or a lower grade provided they meet the necessary requirements.
The nature of this position may require the staff member at times to be called upon to travel for work and/or to work outside normal office hours.
The organization offers several work-life policies including Teleworking and Flexible Working arrangements (Flexitime) subject to business requirements.
Please note that the International Staff at NATO Headquarters in Brussels Belgium is a non-smoking environment.
For information about the NATO Single Salary Scale (Grading Allowances etc.) please visit ourwebsite. Detailed data is available under the Salary and Benefits tab.
NATO does not charge any application processing training interviewing testing or other fee in connection with the application or recruitment process. For more info please click here.

Required Experience:

Unclear Seniority

**Through this competition we are also aiming to select a potential candidate for a post Security Accreditor Classified Communication and Information Systems (CIS) G15/G17 (pending budget approval) ** Please find description of the above mentioned post here: The Joint Intelligence and Security (JIS)...