Cybersecurity Legal and Privacy Advisor

Cosmote Global Solutions; Ispra; In loco; EUR 80.000 - 110.000; Tempo pieno

Descrizione del lavoro

COSMOTE Global Solutions NV is seeking a Cybersecurity Legal and Privacy Advisor to join its ICT team. You will define and assess cybersecurity, compliance and privacy requirements across JRC information-systems and digital services, coordinating risk assessments, security planning and architecture design with system owners and IT providers.

Responsibilities include developing security templates, tracking remediation actions and reporting compliance to the JRC LISO, ensuring consistency of

Competenze

• 2 years of post-secondary education or higher.
• Good knowledge of ISO27000 family standards and the EC Security Policies.
• Experience in security methodologies, Business Impact Assessments, Risk Assessments and Secure System Architecture Design.
• Ability to review draft Security Plans and related security-plan material efficiently.
• Ability to give business and technical presentations to system owners and IT service providers.
• Relevant certifications in Governance, Risk and Compliance or broad Cybersecurity are advantageous.
• Ability to integrate in an international/multicultural environment, rapid self-starting capability.
• Ability to understand, speak and write English; C1 will be an advantage.

Mansioni

• Definition of compliance requirements for JRC information-system controls in close collaboration with System owners and System managers.
• Preparation of templates covering security processes, controls and technical solutions across all JRC digital services.
• Support System Owners and IT service providers with elaboration of Business Impact Assessments and Scope of Security, Risk Assessments, Security Plan and Secure System Architecture Design.
• Assistance with management of remediation activities, including tracking of non-conformities and corrective actions.
• Development and maintenance of security baselines for JRC systems and services.
• Coordination and review of risk assessments, ensuring mitigation measures are documented.
• Reporting of compliance status to the JRC LISO, highlighting gaps and remediation progress.
• Interaction with system owners, IT service providers and Commission services to ensure consistency.

Conoscenze

Cybersecurity

Risk assessments

Security planning

Compliance

English (C1)

Communication skills

Documentation

Multilingual meetings

Formazione

Post-secondary education

Descrizione del lavoro

COSMOTE Global Solutions NV is seeking a skilled Cybersecurity Legal and Privacy Advisor to join our dynamic ICT team. As part of the OTE Group of Companies, we specialize in delivering cutting-edge ICT solutions and services spanning Cloud Services, Data Centre operations, Networking, Cybersecurity, Business Intelligence, Big Data, and more.

In this role, you will be responsible for defining and assessing cybersecurity, compliance and privacy requirements across JRC information-system and digital services. You will work closely with System Owners, System Managers, IT service providers and relevant Commission services to support risk assessments, security planning, secure architecture design and implementation activities. Your responsibilities will include developing security and compliance templates and baselines, coordinating remediation activities, tracking non-conformities and corrective actions, reviewing risk assessments and mitigation measures, and reporting compliance status and gaps to the JRC LISO. You will also ensure consistency in the application of security, legal and privacy requirements across systems and services, supporting the effective implementation and continuous improvement of the JRC security and compliance framework.

Key Responsibilities

• Definition of compliance requirements for JRC information-system controls, in close collaboration with the System owners and System managers
• Preparation of templates covering security processes, controls and technical solutions across all JRC digital services
• Support System Owners and IT service providers with the elaboration of their:
• Business Impact Assessment and Scope of Security
• Risk Assessment exercise
• Security Plan
• Secure System Architecture Design
• Implementation Plan
• Assistance with the management of remediation activities, including tracking of non-conformities, assignment of corrective actions to system owners and verification of their closure within agreed time-frames
• Development and maintenance of security baselines for the JRC systems and services
• Coordination and review of risk-assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documented
• Reporting of compliance status to the JRC LISO, highlighting gaps and progress on remediation
• Interaction with system owners and IT service providers and other relevant Commission services to ensure consistency

Requirements

• 2 years of post-secondary education or higher
• Good knowledge of ISO27000 family of standards, the EC Security Policies, the European Commission Risk-management methodology and related risk-assessment techniques
• Good experience in the security domain, including the development and review of security methodologies, Business Impact Assessments, Risk Assessments and Secure System Architecture Design
• Ability to review draft Security Plans and related security-plan material efficiently and fast
• Ability to give business and technical presentations to system owners, IT service providers
• Ability to apply high quality standards in documentation, template creation and guidance material for security planning
• Ability to cope with fast changing technologies used in cloud services, AI-driven applications and other digital services within the JRC environment
• Very good communication skills with technical and non-technical audiences to facilitate multilingual, multicultural meetings and stakeholder engagement
• Analysis and problem solving skills
• Capability to write clear and structured technical documents
• Ability to participate in technical meetings and good communication skills
• Relevant certifications in Governance, Risk and Compliance or Risk Management and Audit or broad Cybersecurity are an advantageous asset (CGRC, CRISC, CISA, CISSP, CISM, etc..)
• Ability to integrate in an international/multicultural environment, rapid self-starting capability and experience in working in team;
• Ability to participate in multilingual meetings;
• Ability to work in multi-cultural environment, on multiple large projects;
• Ability to establish trusting relationships with counterparts in partnering organizations;
• Excellent team player
• Ability to understand, speak and write English C1 will be an advantage;
• High degree of discretion and integrity