Cyber Security Accreditation Support

Jobtailor; Eigenbrakel; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Jobtailor is seeking a Security Accreditation Specialist to support NATO CIS projects in Belgium. You will advise on accreditation across full project lifecycles and act as a liaison between NCI Agency and NATO SAAs, coordinating risk assessments and documentation development.

Responsibilities include engaging with Boards, staying current on cyber, network and cloud security trends, and briefing senior stakeholders. A NATO SECRET clearance is required to start.

Qualifications

• University degree in Information Security, Telecommunications, Electronics, or Avionics.
• Alternatively, relevant professional experience with CISSP, CISA, or CISM certifications.
• At least 2 years in Security Accreditation for CIS within a large organisation.
• At least 2 years applying security risk assessment methodologies and tools.
• At least 2 years planning, design, and implementing security components for major CIS.
• Proven ability to communicate effectively both orally and in writing.
• Demonstrated briefing and presentation skills to senior stakeholders.
• Interest in Cyber, Network and Cloud Security; ISO/IEC 27001 familiarity (desirable).
• Experience with NATO or international defence organisations (desirable).
• Valid NATO SECRET clearance prior to start (required for engagement).

Responsabilités

• Provide security accreditation advice across the full lifecycle of NATO CIS projects.
• Act as the focal point between NCI Agency and NATO Security Accreditation Authorities (SAAs).
• Build and sustain communications with Security Accreditation Boards and NATO SAAs.
• Conduct Security Risk Assessments identifying threats, vulnerabilities, and residual risks.
• Identify and manage development of accreditation documentation (CIS Description, SAP, SRAR, SRS, SecOPs, STVP).
• Stay abreast of cybersecurity, network security and cloud security developments.
• Provide subject-matter briefings and presentations to NCI Agency stakeholders.
• Coordinate with other Business Areas within NCI Agency.
• Perform other duties as directed by the section head.

Connaissances

Security accreditation

Risk assessment

Communication

Briefing/presentation

Cyber security

Network security

Cloud security

Stakeholder management

Formation

Information Security degree

Telecommunications degree

Electronics degree

Avionics degree

Description du poste

Responsibilities

• Provide security accreditation advice and guidance to NCI Agency Project and System Managers across the full lifecycle of NATO CIS.
• Act as the focal point between NCI Agency and NATO Security Accreditation Authorities (SAAs).
• Build and sustain effective communications with Security Accreditation Boards, NATO SAAs, and NCI Agency organisational units supporting the accreditation process.
• Conduct Security Risk Assessments (SRA) in support of NATO CIS projects, including identification of threat levels and vulnerabilities for all assets comprising NATO CIS, derivation of residual risks, and provision of risk management recommendations.
• Identify, plan, request, and manage the development of all required accreditation documentation, including but not limited to the CIS Description, Security Accreditation Plan (SAP), Security Risk Assessment Report (SRAR), Security Requirement Statements (SRS), Security Operating Procedures (SecOPs), and Security Test and Verification Plan (STVP).
• Stay abreast of technological developments relevant to cybersecurity, network security, and cloud security.
• Provide subject‑matter related briefings and presentations to NCI Agency stakeholders and management.
• Coordinate and cooperate with activities across other Business Areas within NCI Agency.
• Perform any other related duties as directed by the section head.

Requirements

• The candidate must hold a university degree in Information Security, Telecommunications, Electronics, or Avionics.
• Alternatively, in the absence of such a degree, the candidate must have compensating relevant professional experience and hold at least one of the following certifications: CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or CISM (Certified Information Security Manager).
• The candidate must have at least 2 years of experience in Security Accreditation of major Communication and Information Systems (CIS) within acquisition and/or development programmes for a large organisation.
• The candidate must have at least 2 years of experience applying security risk assessment methodologies and tools.
• The candidate must have at least 2 years of experience in the planning, design, and implementation of security components for major CIS.
• The candidate must have a proven ability to communicate effectively both orally and in writing.
• The candidate must have demonstrated briefing and presentation skills to senior stakeholders.
• Demonstrated interest and expertise in Cyber Security, Network Security, and Cloud Security is desirable and will be positively weighted during technical evaluation.
• Familiarity with international security standards, in particular ISO/IEC 27001, is desirable and will be positively weighted during technical evaluation.
• Experience working in or with NATO or other international defence organisations is desirable and will be positively weighted during technical evaluation.
• Any resource proposed for this Statement of Work requires a valid NATO SECRET security clearance prior to the start of the engagement.

Core Competencies

Demonstrates expertise in Security Accreditation processes and methodologies, with a strong focus on Cyber Security, Network Security, and Cloud Security. Proven ability to communicate effectively and deliver presentations to senior stakeholders while managing accreditation documentation and conducting Security Risk Assessments.