Enterprise Cyber Risk Assessment Officer

pIT Services /p pType: Contract /p pCountry: Belgium /p pCity: Brussels /p pSecurity: Needed /p pCompany: NCIA /p h3Essential Qualifications/Experience /h3 ul liThe candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience /li liThe candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms /li liThe candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management /li liThe candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operational impact /li liThe candidate must have experience working with vulnerability management tools, risk management platforms, dashboards, or GRC solutions /li liThe candidate should have experience in securing cloud-based environments and understanding cloud-specific security risks /li liThe candidate must have experience in the management or delivery of cybersecurity programmes across multiple focus areas, including vulnerability management, risk management, and cyber defence /li liThe candidate must have demonstrated experience working within cross-functional teams and complex reporting structures /li liThe candidate must demonstrate strong English writing and speaking communication and presentation skills, including the ability to convey complex cyber security concepts to both technical and non-technical audiences /li liThe candidate must demonstrate a strong security-focused and analytical mindset, with attention to detail and problem-solving capability /li /ul h3Desirable Qualifications/Experience /h3 ul liKnowledge of NATO Security Policy and its supporting Directives /li liKnowledge of NATO CIS Security Accreditation processes, or equivalent national processes /li liRecognised professional certifications in cyber security, risk management, or project management /li /ul h3DUTIES/ROLE /h3 pRisk Registry and Enterprise Risk Visibility Support /p ul liSupport the maintenance, enhancement, and utilisation of enterprise risk management tools, risk registries, dashboards, and decision-support capabilities. Ensure accurate registration, tracking, monitoring, and reporting of cyber, cloud, AI, and ICT risks. Maintain traceability between technical findings, vulnerabilities, threat assessments, risk treatment actions, risk acceptance decisions, and enterprise risk reporting /li /ul pEnterprise Cyber Risk Situational Awareness and Reporting /p ul liSupport enterprise-wide cyber risk situational awareness by consolidating and analysing information from risk assessments, vulnerability assessments, operational reporting, threat intelligence, audits, security reviews, and accreditation activities. Produce dashboards, risk posture reports, trend analyses, executive summaries, and briefing materials to support operational and strategic decision making across NATO /li /ul pStakeholder Management and Coordination /p ul liEngage and coordinate multiple stakeholders (technical teams, service owners, risk owners, operational authorities, security/accreditation stakeholders) across locations to align on security requirements, risk posture, and delivery priorities. Prepare and deliver briefings and decision-support materials /li /ul pReporting, Briefings, and Technical Communication /p ul liPrepare and deliver briefings, presentations, and reports to NATO committees, Capability Panels, and working groups, clearly communicating technical concepts, progress, and recommendations related to cyber security standards /li /ul pSupport to Unforeseen and Ad Hoc Requirements /p ul liThe contractor shall provide support to unforeseen or ad hoc requirements within the scope of cyber security, Cloud, AI, and interoperability as requested and prioritised by CDT. Such support shall be subject to mutual agreement on scope, effort, and priority /li /ul h3Job requirements /h3 ul liThe candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience (Mandatory) /li liThe candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms (Mandatory) /li liThe candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management (Mandatory) /li liThe candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operation