Senior Cybersecurity Governance Specialist

h3Senior Cybersecurity Governance Specialist | Contract | Brussels /h3 h3Context /h3 pRecruiting a Senior Cybersecurity Governance Specialist to support a European Institution’s Generative AI Applications (GAIA) Programme. Building on the success of the pilot, the programme covers: /p ul liThe tool, a general-purpose generative AI solution for staff /li liThe Platform, for building genAI applications on corporate building blocks /li liThe RAG corporate service, which provides semantic indices of corporate knowledge bases /li /ul pThe aim is to make all GAIA services operationally ready and available to all European Institutions, Bodies and Agencies in 2026. You will support the programme on cybersecurity, including the AI domain. /p h3Tasks /h3 ul liSupport the GAIA Programme team on cybersecurity governance, risk management and compliance /li liDefine, maintain and monitor the cybersecurity governance framework for the GAIA landscape, including the registry of security artefacts /li liAnalyse, draft and maintain governance artefacts, including risk assessments, compliance assessments, IT security plans, security exceptions, waivers and follow-up actions /li liMonitor and assess security requirements, risks and obligations relevant to generative AI services and platforms, and contribute to their consistent implementation /li liOversee, monitor and report on security governance and compliance of vendor and contractor implementation activities /li liEstablish and maintain governance mechanisms for the consistent application, monitoring and follow-up of security controls /li liPrepare security governance reporting, dashboards, status updates and briefing material for management and stakeholders /li liSupport the preparation and follow-up of audits, reviews and compliance checks, including evidence collection and remediation tracking /li liProvide cybersecurity governance advice to projects using the GAIA horizontal solutions /li /ul h3Education /h3 ul liBachelor’s degree or higher (EQF Level 6) /li liA degree in cybersecurity, information security, information systems, ICT, risk management, governance, law, public administration or a related field is an asset /li /ul h3Knowledge, Skills and Expertise /h3 ul liVery good knowledge of cybersecurity governance and compliance requirements in the European Institutions, particularly DIGIT /li liGood knowledge of cybersecurity governance, risk management and internal control methodologies /li liGood knowledge of preparing and maintaining security governance artefacts, such as risk registers, compliance assessments, IT security plans, control catalogues, exception registers and remediation follow-up /li liAbility to analyse and assess security requirements, risks and controls in emerging technologies such as generative AI /li liAbility to maintain a high-level governance view of the cybersecurity landscape across multiple services and projects /li liAbility to monitor, track and report on risks, compliance actions, remediation measures and security decisions /li liStrong analytical, organisational and problem-solving skills /li liClear, structured and concise cybersecurity governance documentation /li liGood communication with technical and non-technical audiences /li liAbility to prepare and deliver business and governance presentations /li liAbility to contribute to governance meetings, working groups and review boards /li /ul h3Non-Technical Skills /h3 ul liAbility to integrate into an international and multicultural environment, with a self-starting attitude and team experience /li liAbility to participate in multilingual meetings /li liAbility to work across multiple large projects /li liAbility to build trusting relationships with partner organisations /li liExcellent team player /li liEnglish at C1 level (mandatory) /li liHigh degree of discretion and integrity /li /ul h3Working Conditions /h3 ul liLocation: Brussels, Belgium, on-site and part-time /li liRemote work may be authorised for tasks not requiring on-site presence, provided you can reach the premises within 2 hours /li liLaptop provided, to be collected in Brussels /li /ul