Senior Cyber Risk Assessment Lead (NATO Secret)

GardPass Consulting & Space; Brussel Hoofdstad; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

None

Job summary

NATO HQ in Brussels is seeking a senior cybersecurity risk specialist to conduct enterprise-level risk assessments across ICT, cloud and AI-enabled capabilities. You will map findings to business impact and support the NATO ERM framework, delivering dashboards and briefing materials for governance bodies.

The role requires NATO SECRET clearance, a technical degree, and strong English communication. On-site, five days a week in Brussels, with limited telework subject to security considerations.

Qualifications

• Valid NATO SECRET security clearance.
• University degree in a relevant technical field.
• Comprehensive knowledge of computer and network security principles and vulnerabilities.
• Experience in vulnerability management or cyber risk management.
• Experience with vulnerability analysis and risk assessment.
• Experience using vulnerability management tools, risk management platforms, dashboards or GRC solutions.
• Experience securing cloud-based environments.
• Experience managing cybersecurity programmes across multiple focus areas.
• Experience in cross-functional team work.
• Excellent written and spoken English.

Responsibilities

• Conduct CIS and enterprise-level cyber risk assessments across NATO ICT, cloud, digital and AI-enabled capabilities.
• Perform qualitative and quantitative risk analysis to identify, assess, prioritise and communicate risks.
• Develop risk assessment methodologies, evaluate risk scenarios and analyse risk interdependencies.
• Support the development, implementation and continuous improvement of the NATO Enterprise Risk Management (ERM) Framework.
• Integrate cyber, ICT, cloud, AI, vulnerability, threat and operational risk information into enterprise risk management activities.
• Assess risks associated with cloud services, emerging technologies, AI-enabled systems, automation platforms and digital transformation initiatives.
• Contribute to risk methodologies, taxonomies, metrics, reporting standards, risk treatment approaches and governance procedures.
• Support the secure and responsible adoption of cloud and AI capabilities by ensuring associated risks are identified, documented, monitored and communicated.
• Maintain and enhance enterprise risk management tools, risk registries, dashboards and decision-support capabilities.
• Track cyber, cloud, AI and ICT risks, maintaining traceability between technical findings, vulnerabilities, threat assessments, risk treatment actions and risk acceptance decisions.
• Consolidate and analyse information from risk assessments, vulnerability assessments, operational reporting, threat intelligence, audits, security reviews and accreditation activities.
• Produce dashboards, risk posture reports, trend analyses, executive summaries and briefing materials.
• Coordinate with technical teams, service owners, risk owners, operational authorities and security/accreditation stakeholders across NATO.
• Prepare and deliver briefings, presentations and reports to NATO committees, Capability Panels and working groups.
• Provide support for additional requirements relating to cybersecurity, cloud, AI and interoperability, as agreed with CDT.

Skills

Security clearance

Cybersecurity knowledge

Risk analysis

English communication

Cross-functional teamwork

Attention to detail

Education

University degree in Computer Science / Cyber Security / Systems Science

Tools

Vulnerability management tools

GRC platforms

Dashboards

Job description

NATO HQ in Brussels is seeking a senior cybersecurity risk specialist to conduct enterprise-level risk assessments across ICT, cloud and AI-enabled capabilities. You will map findings to business impact and support the NATO ERM framework, delivering dashboards and briefing materials for governance bodies.

The role requires NATO SECRET clearance, a technical degree, and strong English communication. On-site, five days a week in Brussels, with limited telework subject to security considerations.