Cyber Security Accreditation Engineer — Documentation, Testing and Remediation for NATO with security clearance

Wlgroup; Den Haag; On-site; EUR 70,000 - 95,000; Full time

Job summary

Wlgroup in The Hague seeks a seasoned security accreditation professional to manage risk assessment, documentation, and liaison with accreditation authorities. You will oversee the end-to-end accreditation process for complex defence-related systems.

You will gather system descriptions, security architecture, accreditation plans and test plans, witness testing, and coordinate remediation with engineering teams. Fluent English and experience with government or defence customers are essential.

Qualifications

• Minimum several years in cyber security in technical environments.
• Experience accrediting major system projects in large organisations.
• Knowledge of risk assessment methodologies and supporting tools.
• Strong network knowledge with deployment experience.
• Ability to work independently and coordinate industry teams.

Responsibilities

• Provide accreditation input into project proposals and statements of work.
• Conduct security risk assessments for communications and information systems.
• Identify and manage accreditation documents: system descriptions, security architecture, accreditation plans, risk assessment reports, security requirement statements, operating procedures and test plans.
• Witness security testing and coordinate remediation with the implementers.
• Engage with accreditation authorities and internal units to streamline approval processes.
• Feed accreditation status into project reporting with highlight and exception reports.
• Brief and present on accreditation topics to non-specialists.

Skills

Cyber security

Security architecture

Security risk management

Government/military projects

English fluent

Job description

A multinational defence organisation accredits every system it puts into service, and this role carries that work: assessing the risk, assembling the evidence, witnessing the testing and dealing with the security accreditation authorities until a system is cleared to operate.

What you would be doing

• Providing accreditation input into project proposals, statements of work and the wider project documentation, early enough to matter.
• Conducting security risk assessments for communication and information systems.
• Identifying, planning and managing the documents accreditation needs — system descriptions and security architecture, accreditation plans, risk assessment reports, security requirement statements, operating procedures and the test and verification plan.
• Witnessing security testing against that plan, and coordinating the remediation that follows with the people who have to do it.
• Building working relationships with accreditation authorities and with the internal units involved, so approval is a process rather than a negotiation.
• Feeding accreditation status into project and portfolio reporting, including highlight and exception reports.
• Briefing and presenting on the subject to people who are not specialists in it.

What you would bring

• Several years in cyber security — security architecture, delivery of security capabilities and services, or security risk management in demanding technical environments.
• Direct experience of accrediting major system acquisition or development projects in a large organisation.
• Security risk assessment methodologies and the tools that support them.
• Network knowledge with real deployment experience, including modern addressing.
• The independence to run your own work and the judgement to coordinate industry teams.
• A record of delivering systems and capabilities for government, military or industry customers.
• Fluent professional English.