Enterprise Cyber Risk Assessment Officer

Brevco Services; Brussel Hoofdstad; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

NCIA in Brussels seeks a seasoned cybersecurity risk professional to lead enterprise risk visibility and reporting across cyber, cloud, and ICT domains. You will coordinate risk assessments, vulnerability analysis, and risk treatment actions, while ensuring clear communication to technical and non-technical audiences.

The role requires experience delivering cybersecurity programmes, working with risk dashboards and GRC tools, and collaborating across multi-location teams.

Qualifications

• University degree in computer science, systems science, cyber security, or equivalent.
• Knowledge of computer and network security principles, networking technologies, and vulnerabilities affecting OS, cloud, apps and enterprise platforms.
• Experience in vulnerability management, cyber exposure or cyber risk management.
• Experience in vulnerability analysis, root cause analysis, and risk assessment with business impact mapping.
• Experience with vulnerability management tools, risk platforms, dashboards, or GRC solutions.
• Experience securing cloud environments and understanding cloud security risks.
• Experience managing or delivering cybersecurity programmes across vulnerability, risk, and cyber defence.
• Experience working in cross-functional teams and complex reporting structures.
• Strong English writing and speaking communication, able to convey complex cyber security concepts to technical and non-technical audiences.
• Strong security-focused and analytical mindset with attention to detail.

Responsibilities

• Risk Registry and Enterprise Risk Visibility Support: maintain risk tools, dashboards, and reporting for cyber, cloud, AI, and ICT risks.
• Enterprise Cyber Risk Situational Awareness and Reporting: consolidate risk assessments, vulnerability findings, and audits to produce dashboards and executive summaries.
• Stakeholder Management and Coordination: coordinate multiple stakeholders across locations, prepare briefings and decision-support materials.
• Reporting, Briefings, and Technical Communication: deliver presentations and reports to NATO committees and working groups.
• Support to Unforeseen Requirements: provide security, cloud, AI, and interoperability support as needed.

Skills

University degree in computer science/

Security principles knowledge

Vulnerability management experience

Root cause analysis

Vulnerability management tools

Cloud security knowledge

Cybersecurity programme delivery

Cross-functional collaboration

English communication

Analytical mindset

Education

University degree in a technical field

Tools

GRC tools

Job description

IT Services

Type: Contract

Country: Belgium

City: Brussels

Security: Needed

Company: NCIA

Essential Qualifications/Experience

• The candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience
• The candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms
• The candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management
• The candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operational impact
• The candidate must have experience working with vulnerability management tools, risk management platforms, dashboards, or GRC solutions
• The candidate should have experience in securing cloud-based environments and understanding cloud-specific security risks
• The candidate must have experience in the management or delivery of cybersecurity programmes across multiple focus areas, including vulnerability management, risk management, and cyber defence
• The candidate must have demonstrated experience working within cross-functional teams and complex reporting structures
• The candidate must demonstrate strong English writing and speaking communication and presentation skills, including the ability to convey complex cyber security concepts to both technical and non-technical audiences
• The candidate must demonstrate a strong security-focused and analytical mindset, with attention to detail and problem-solving capability

Desirable Qualifications/Experience

• Knowledge of NATO Security Policy and its supporting Directives
• Knowledge of NATO CIS Security Accreditation processes, or equivalent national processes
• Recognised professional certifications in cyber security, risk management, or project management

DUTIES/ROLE

Risk Registry and Enterprise Risk Visibility Support

• Support the maintenance, enhancement, and utilisation of enterprise risk management tools, risk registries, dashboards, and decision-support capabilities. Ensure accurate registration, tracking, monitoring, and reporting of cyber, cloud, AI, and ICT risks. Maintain traceability between technical findings, vulnerabilities, threat assessments, risk treatment actions, risk acceptance decisions, and enterprise risk reporting

Enterprise Cyber Risk Situational Awareness and Reporting

• Support enterprise-wide cyber risk situational awareness by consolidating and analysing information from risk assessments, vulnerability assessments, operational reporting, threat intelligence, audits, security reviews, and accreditation activities. Produce dashboards, risk posture reports, trend analyses, executive summaries, and briefing materials to support operational and strategic decision making across NATO

Stakeholder Management and Coordination

• Engage and coordinate multiple stakeholders (technical teams, service owners, risk owners, operational authorities, security/accreditation stakeholders) across locations to align on security requirements, risk posture, and delivery priorities. Prepare and deliver briefings and decision-support materials

Reporting, Briefings, and Technical Communication

• Prepare and deliver briefings, presentations, and reports to NATO committees, Capability Panels, and working groups, clearly communicating technical concepts, progress, and recommendations related to cyber security standards

Support to Unforeseen and Ad Hoc Requirements

• The contractor shall provide support to unforeseen or ad hoc requirements within the scope of cyber security, Cloud, AI, and interoperability as requested and prioritised by CDT. Such support shall be subject to mutual agreement on scope, effort, and priority

Job requirements

• The candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience (Mandatory)
• The candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms (Mandatory)
• The candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management (Mandatory)
• The candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operational impact (Mandatory)
• The candidate must have experience working with vulnerability management tools, risk management platforms, dashboards, or GRC solutions (Mandatory)
• The candidate should have experience in securing cloud-based environments and understanding cloud-specific security risks (Mandatory)
• The candidate must have experience in the management or delivery of cybersecurity programmes across multiple focus areas, including vulnerability management, risk management, and cyber defence (Mandatory)
• The candidate must have demonstrated experience working within cross-functional teams and complex reporting structures (Mandatory)
• The candidate must demonstrate strong English writing and speaking communication and presentation skills, including the ability to convey complex cyber security concepts to both technical and non-technical audiences (Mandatory)
• The candidate must demonstrate a strong security-focused and analytical mindset, with attention to detail and problem-solving capability (Mandatory)
• Knowledge of NATO CIS Security Accreditation processes, or equivalent national processes (Nice to have)
• Recognised professional certifications in cyber security, risk management, or project management (Nice to have)