CDT-0029 - Enterprise Cyber Risk Assessment Officer BELGIUM (contract)

h3bCDT-0029
- Enterprise Cyber Risk Assessment Officer BELGIUM (contract) /b /h3 pbPosted: /b November /p pbRelocation Assistance: /b Available /p pbDeadline Date: /b Thursday 19 November 2026 /p pbRequirement: /b Enterprise Cyber Risk Assessment Officer /p pbLocation: /b Brussels, BELGIUM /p pbFull Time On-Site: /b Yes /p pbNot to Exceed Rate: /b 90 EUR /p pbTotal Scope of the request (hours): /b 1780 (Estimate) /p pbRequired Start Date: /b 4 January 2027 /p pbEnd Contract Date: /b 31 December 2027 /p pbRequired Security Clearance: /b NATO SECRET /p pPlease do bNOT /b apply for any NATO contract positions unless you meet ALL the following criteria: /p ul liCurrent National or NATO SECRET clearance /li liNationality of one of the NATO member countries /li liCurrent work visa for the specific location if applying for an in-country position /li /ul pAny applications that do NOT meet all the above
- and do not CLEARLY show these on the CV
- will be deleted. /p h3Introduction /h3 pThe Cyber and Digital Transformation Division (CDT) leads NATO's digital transformation, cybersecurity and cyber defence efforts, translating NATO priorities into coherent strategies and coordinated delivery across the Alliance to strengthen interoperability, resilience, cybersecurity and operational effectiveness. CDT drives NATO's Digital Transformation, a key objective is to strengthen the ability of Allies and the NATO Enterprise to deter, defend against and counter the full spectrum of cyber and cyber-enabled threats at the speed of relevance, comprehensively across the political, military, and technical levels. In particular, strengthen mechanisms and tools to enhance readiness and resilience against cyber threats across the Alliance, focusing in particular on Mission Vital Infrastructure (MVI). This position contributes to the Cyber Risk Management function of CDT, supporting the risk-informed decision-making process of the ECISOA. It provides specialist analysis and advice to inform CDT leadership's cybersecurity decisions across the Division's areas of responsibility. The Enterprise Cyber Risk Assessment Officer supports NATO's enterprise-wide governance of cyber, cloud, artificial intelligence (AI), and ICT risks through the conduct of system-, service-, and enterprise-level risk assessments and the delivery of both qualitative and quantitative risk analysis. The role contributes to the continued development and implementation of the NATO Enterprise Risk Management (ERM) Framework, ensuring that technical, operational, and strategic risks are identified, assessed, prioritised, and communicated to support risk-informed decision-making across the NATO Enterprise. The position has a particular emphasis on cyber risk management within cloud and AI-enabled environments, supporting the secure adoption of emerging technologies while ensuring that associated risks are effectively governed and aligned with NATO security and operational requirements. It will contribute to the assessment of complex digital services, the integration of risk management processes across NATO CIS Operational Authorities (CISOAs), and the enhancement of enterprise-wide visibility of cyber risk. Working directly with CDT in its role as NATO Enterprise Cybersecurity Risk Owner, the incumbent will help strengthen situational awareness, governance, resilience, and decision-making across NATO's digital ecosystem. We are seeking a highly motivated professional with strong analytical, technical, and communication skills, as well as experience in cybersecurity, enterprise risk management, cloud technologies, and AI governance. Knowledge of NATO structures and processes would be considered an asset. /p h3Tasks /h3 h3Enterprise Cyber Risk Assessment and Analysis /h3 pConduct and support CIS and Enterprise-level cyber risk assessments across NATO ICT, cloud, digital, and AI-enabled capabilities. Perform both qualitative and quantitative risk analysis to identify, assess, prioritise, and communicate risks affecting NATO operations, mission objectives, and Mission Vital Infrastructure (MVI). Develop risk assessment methodologies, evaluate risk scenarios, analyse risk interdependencies, and support risk-informed decision making in accordance with the NATO Enterprise Risk Management (ERM) Framework. /p h3Enterprise Cyber, Cloud and AI Risk Governance Support /h3 pSupport the development, implementation, and continuous improvement of the NATO Enterprise Risk Management (ERM) Framework and associated governance processes. Ensure the integration of cyber, ICT, cloud, artificial intelligence (AI), vulnerability, threat, and operational risk information into enterprise risk management activities. Conduct and support risk assessments related to cloud services, emerging technologies, AI-enabled systems, automation platforms, and digital transformation initiatives. Contribute to the development of risk methodologies, taxonomies, metrics, reporting standards, risk treatment app