Cyber Security Accreditation Engineer — Documentation, Testing and Remediation for NATO with security clearance

WLG; Den Haag; On-site; EUR 75,000 - 105,000; Full time

Job summary

WLG is seeking a security accreditation specialist to assess risk, assemble the evidence, witness testing and liaise with accreditation authorities until a system is cleared to operate.

The role focuses on providing input into proposals, planning accreditation documents and coordinating remediation with technical teams across government and industry customers. Fluent English is required for global collaboration.

Qualifications

• Several years in cyber security in demanding technical environments.
• Direct experience accrediting major system projects in a large organisation.
• Knowledge of risk assessment methodologies and supporting tools.
• Strong network knowledge with real deployment experience.
• Ability to work independently and coordinate industry teams.
• Proven track record delivering systems for government or military customers.
• Fluent professional English.

Responsibilities

• Provide accreditation input into project proposals, statements of work and wider documentation.
• Conduct security risk assessments for communication and information systems.
• Identify, plan and manage documents accreditation needs (system descriptions, security architecture, plans, risk reports, operating procedures).
• Witness security testing against the plan and coordinate remediation with responsible teams.
• Build relationships with accreditation authorities and internal units to streamline approvals.
• Feed accreditation status into project and portfolio reporting (highlights, exceptions).
• Brief and present on accreditation topics to non-specialists.

Skills

Cyber security

Security architecture

Security risk management

Accreditation experience

Risk assessment methodologies

Network knowledge

English fluency

Independence

Government/military customers

Job description

A multinational defence organisation accredits every system it puts into service, and this role carries that work: assessing the risk, assembling the evidence, witnessing the testing and dealing with the security accreditation authorities until a system is cleared to operate.

What You Would Be Doing

• Providing accreditation input into project proposals, statements of work and the wider project documentation, early enough to matter.
• Conducting security risk assessments for communication and information systems.
• Identifying, planning and managing the documents accreditation needs - system descriptions and security architecture, accreditation plans, risk assessment reports, security requirement statements, operating procedures and the test and verification plan.
• Witnessing security testing against that plan, and coordinating the remediation that follows with the people who have to do it.
• Building working relationships with accreditation authorities and with the internal units involved, so approval is a process rather than a negotiation.
• Feeding accreditation status into project and portfolio reporting, including highlight and exception reports.
• Briefing and presenting on the subject to people who are not specialists in it.

What you would bring

• Several years in cyber security — security architecture, delivery of security capabilities and services, or security risk management in demanding technical environments.
• Direct experience of accrediting major system acquisition or development projects in a large organisation.
• Security risk assessment methodologies and the tools that support them.
• Network knowledge with real deployment experience, including modern addressing.
• The independence to run your own work and the judgement to coordinate industry teams.
• A record of delivering systems and capabilities for government, military or industry customers.
• Fluent professional English.