Senior Cybersecurity Governance Specialist

Senior Cybersecurity Governance Specialist | Contract | Brussels

Context

Recruiting a Senior Cybersecurity Governance Specialist to support a European Institution’s Generative AI Applications (GAIA) Programme. Building on the success of the pilot, the programme covers:

• The tool, a general-purpose generative AI solution for staff
• The Platform, for building genAI applications on corporate building blocks
• The RAG corporate service, which provides semantic indices of corporate knowledge bases

The aim is to make all GAIA services operationally ready and available to all European Institutions, Bodies and Agencies in 2026. You will support the programme on cybersecurity, including the AI domain.

Tasks

• Support the GAIA Programme team on cybersecurity governance, risk management and compliance
• Define, maintain and monitor the cybersecurity governance framework for the GAIA landscape, including the registry of security artefacts
• Analyse, draft and maintain governance artefacts, including risk assessments, compliance assessments, IT security plans, security exceptions, waivers and follow-up actions
• Monitor and assess security requirements, risks and obligations relevant to generative AI services and platforms, and contribute to their consistent implementation
• Oversee, monitor and report on security governance and compliance of vendor and contractor implementation activities
• Establish and maintain governance mechanisms for the consistent application, monitoring and follow-up of security controls
• Prepare security governance reporting, dashboards, status updates and briefing material for management and stakeholders
• Support the preparation and follow-up of audits, reviews and compliance checks, including evidence collection and remediation tracking
• Provide cybersecurity governance advice to projects using the GAIA horizontal solutions

Education

• Bachelor’s degree or higher (EQF Level 6)
• A degree in cybersecurity, information security, information systems, ICT, risk management, governance, law, public administration or a related field is an asset

Knowledge, Skills and Expertise

• Very good knowledge of cybersecurity governance and compliance requirements in the European Institutions, particularly DIGIT
• Good knowledge of cybersecurity governance, risk management and internal control methodologies
• Good knowledge of preparing and maintaining security governance artefacts, such as risk registers, compliance assessments, IT security plans, control catalogues, exception registers and remediation follow-up
• Ability to analyse and assess security requirements, risks and controls in emerging technologies such as generative AI
• Ability to maintain a high-level governance view of the cybersecurity landscape across multiple services and projects
• Ability to monitor, track and report on risks, compliance actions, remediation measures and security decisions
• Strong analytical, organisational and problem-solving skills
• Clear, structured and concise cybersecurity governance documentation
• Good communication with technical and non-technical audiences
• Ability to prepare and deliver business and governance presentations
• Ability to contribute to governance meetings, working groups and review boards

Non-Technical Skills

• Ability to integrate into an international and multicultural environment, with a self-starting attitude and team experience
• Ability to participate in multilingual meetings
• Ability to work across multiple large projects
• Ability to build trusting relationships with partner organisations
• Excellent team player
• English at C1 level (mandatory)
• High degree of discretion and integrity

Working Conditions

• Location: Brussels, Belgium, on-site and part-time
• Remote work may be authorised for tasks not requiring on-site presence, provided you can reach the premises within 2 hours
• Laptop provided, to be collected in Brussels