Enterprise Cyber Risk Assessment Officer (Deadline 20.11.2026)

McBride International; Brussel Hoofdstad; On-site; EUR 90,000 - 130,000; Full time

Job summary

McBride International is seeking a skilled cyber risk professional to conduct enterprise risk assessments across NATO-relevant ICT, cloud, and AI capabilities. You will develop risk methodologies and governance artefacts, maintain risk dashboards, and provide decision-support materials for leadership.

The role emphasizes cross-functional teamwork, strong English communication, and the ability to translate technical findings into actionable risk mitigation plans for multiple stakeholders.

Qualifications

• University degree in a relevant technical field such as computer science or cyber security.
• Experience in vulnerability management, cyber risk management, and risk assessment.
• Knowledge of NATO security policy and accreditation processes is desirable.
• Strong written and spoken English communication skills.

Responsibilities

• Conduct and support enterprise cyber risk assessments across ICT, cloud, and AI-enabled capabilities.
• Develop risk methodologies, taxonomies, and reporting standards for ERP governance.
• Maintain risk registries, dashboards, and decision-support tools.
• Produce executive briefings and technical communications for governance committees.
• Coordinate with multiple stakeholders across locations to align on security requirements.

Skills

English communication

Cross-functional teamwork

Cyber risk management

Vulnerability analysis

Risk assessments

Cloud security

Security principles

Communication/presentation

Education

University degree in computer science or cyber security

Tools

Vulnerability management tools

Risk management platforms

Dashboards

GRC solutions

Job description

Brussels, Belgium | Posted on 11/11/2026

McBride International is a European-based management consulting, IT, and Command, Control, Communication, Computers, Cyber, Intelligence, Surveillance and Reconnaissance (C5ISR) firm. We provide professional services focusing on strategy development and execution, IT transformation, business process improvement, program management, research and development, risk management, financial management, and training. Our dedicated team of project managers, consultants, and trainers play a critical role in supporting client engagements from inception to completion. We partner with clients by providing qualified and experienced resources that possess the relevant skills, knowledge, and expertise needed to develop and execute solutions in support of their mission and business goals.

Job Description

TASKS

Enterprise Cyber Risk Assessment and Analysis

• - Conduct and support CIS and Enterprise-level cyber risk assessments across NATO ICT, cloud, digital, and AI-enabled capabilities. Perform both qualitative and quantitative risk analysis to identify, assess, prioritize, and communicate risks affecting NATO operations, mission objectives, and Mission Vital Infrastructure (MVI).
• - Develop risk assessment methodologies, evaluate risk scenarios, analyse risk interdependencies, and support risk-informed decision making in accordance with the NATO Enterprise Risk Management (ERM) Framework.

Enterprise Cyber, Cloud and AI Risk Governance Support

• - Support the development, implementation, and continuous improvement of the NATO Enterprise Risk Management (ERM) Framework and associated governance processes. Ensure the integration of cyber, ICT, cloud, artificial intelligence (AI), vulnerability, threat, and operational risk information into enterprise risk management activities.
• - Conduct and support risk assessments related to cloud services, emerging technologies, AI-enabled systems, automation platforms, and digital transformation initiatives.
• - Contribute to the development of risk methodologies, taxonomies, metrics, reporting standards, risk treatment approaches, and governance procedures that enable consistent risk identification, assessment, prioritisation, and reporting across the NATO Enterprise.
• - Support the secure and responsible adoption of cloud and AI capabilities by ensuring that associated risks are appropriately identified, documented, monitored, and communicated to relevant risk owners and decision-making authorities.
• - Contribute to the development of governance artefacts, risk recommendations, and decision-support products aligned with NATO security and operational requirements.

Risk Registry and Enterprise Risk Visibility Support

• - Support the maintenance, enhancement, and utilisation of enterprise risk management tools, risk registries, dashboards, and decision-support capabilities.
• - Ensure accurate registration, tracking, monitoring, and reporting of cyber, cloud, AI, and ICT risks. Maintain traceability between technical findings, vulnerabilities, threat assessments, risk treatment actions, risk acceptance decisions, and enterprise risk reporting.

Enterprise Cyber Risk Situational Awareness and Reporting

• - Support enterprise-wide cyber risk situational awareness by consolidating and analysing information from risk assessments, vulnerability assessments, operational reporting, threat intelligence, audits, security reviews, and accreditation activities.
• - Produce dashboards, risk posture reports, trend analyses, executive summaries, and briefing materials to support operational and strategic decision making across NATO.

Stakeholder Management and Coordination

• - Engage and coordinate multiple stakeholders (technical teams, service owners, risk owners, operational authorities, security/accreditation stakeholders) across locations to align on security requirements, risk posture, and delivery priorities.
• - Prepare and deliver briefings and decision-support materials.

Reporting, Briefings, and Technical Communication

• - Prepare and deliver briefings, presentations, and reports to NATO committees, Capability Panels, and working groups, clearly communicating technical concepts, progress, and recommendations related to cyber security standards

Support to Unforeseen and Ad Hoc Requirements.

• - The contractor shall provide support to unforeseen or ad hoc requirements within the scope of cyber security, Cloud, AI, and interoperability as requested and prioritised by CDT. Such support shall be subject to mutual agreement on scope, effort, and priority.

Requirements

• o The candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience.
• o The candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms.
• o The candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management.
• o The candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operational impact.
• o The candidate must have experience working with vulnerability management tools, risk management platforms, dashboards, or GRC solutions.
• o The candidate should have experience in securing cloud-based environments and understanding cloud-specific security risks.
• o The candidate must have experience in the management or delivery of cybersecurity programmes across multiple focus areas, including vulnerability management, risk management, and cyber defence.
• o The candidate must have demonstrated experience working within crossfunctional teams and complex reporting structures.
• o The candidate must demonstrate strong English writing and speaking communication and presentation skills, including the ability to convey complex cyber security concepts to both technical and non-technical audiences.
• o The candidate must demonstrate a strong security-focused and analytical mindset, with attention to detail and problem-solving capability.
• o Knowledge of NATO Security Policy and its supporting Directives is desirable.
• o Knowledge of NATO CIS Security Accreditation processes, or equivalent national processes, is desirable.
• o Recognised professional certifications in cyber security, risk management, or project management are desirable.