NATO Cyber Risk & Accreditation Lead

Spektrum; Eigenbrakel; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Spektrum in Belgium seeks an experienced Cyber Risk Manager to support NATO NCIA and related agencies. You will identify security risks, assess threats, and coordinate risk considerations between CISPIA, the CISOA, the CISP and the SAA.

You will develop KPI and KRI metrics, prepare SRM and SRA documentation, and manage risk in accreditation packages. The role leads a risk management team covering physical security, information security, threat assessment, and CIS security.

Qualifications

• 3 years of experience in Cyber Risk management with NATO or industry practice.
• Extensive experience using risk management and assessment tools.

Responsabilités

• Identify scope and objectives of security risk assessments.
• Coordinate risk considerations between CISPIA, CISOA, CISP and the SAA.
• Determine assets that contribute to mission and their value.
• Identify threats, vulnerabilities, and prioritize risks.
• Identify security measures to mitigate risk.
• Collect and track risk information for knowledge base.
• Develop KPI and KRI for risk management.
• Produce SRM reports describing objectives, asset/threat/vulnerability summaries, and residual risk.
• Compile and manage Security accreditation documents (SRM, SRA, SecOPs, SRS, SSRS, STVP).
• Lead risk management team across physical security, information security, threat assessment, and CIS security.

Connaissances

Cyber risk management

Risk assessment tools

Security risk coordination

Formation

Bachelor's degree

Master's degree (desirable)

Outils

PILAR risk management tool

Description du poste

Spektrum in Belgium seeks an experienced Cyber Risk Manager to support NATO NCIA and related agencies. You will identify security risks, assess threats, and coordinate risk considerations between CISPIA, the CISOA, the CISP and the SAA.

You will develop KPI and KRI metrics, prepare SRM and SRA documentation, and manage risk in accreditation packages. The role leads a risk management team covering physical security, information security, threat assessment, and CIS security.