Cyber Security Engineer — Security Accreditation and Risk Assessment for NATO with security clearance

Il y a 7 heures

Brussels, Belgique WLG Temps plein
ppBefore a classified system goes live, somebody has to be able to say what the risks are, what controls answer them, and what is left over. A multinational defence organisation is looking for the engineer who does that work: the assessment, the paperwork that carries it and the conversations with the authorities who sign it off. /p h3What You Would Be Doing /h3 ul liContributing to solution architecture in your areas by identifying which security directives actually apply. /li liAdvising on how physical, procedural and technical security controls are applied and operated, and explaining plainly what each one is for. /li liRunning security risk assessments for communication and information systems: the threats, the vulnerabilities across every asset, the residual risk and what to do about it. /li liSpotting the risks a candidate technical architecture creates, and proposing alternatives or countermeasures rather than only objections. /li liScoping, defining and prioritising the requirements that accreditation depends on, to agreed standards and with the evidence written down. /li liWorking with stakeholders to prioritise those requirements and to resolve the conflicts between them. /li liAdvising project and system managers across the whole life of a system, including input to project proposals and invitations to bid. /li liPlanning, requesting and managing the documents accreditation needs — system description, accreditation plan, risk assessment report, security requirement statements, operating procedures and the test and verification plan. /li liWitnessing security testing and agreeing the remediation plan with the accrediting authority. /li liBuilding durable working relationships with accreditation boards, national authorities, system operating authorities and the internal teams that support the process, and representing the organisation on accreditation matters. /li /ul h3What you would bring /h3 ul liA bachelor's degree from a recognised university in a related discipline with two years of relevant experience behind it. Exceptionally, around six years of progressive expertise in this kind of work can stand in place of the degree. /li liAt least two years across each of the areas the post turns on: accreditation of major system acquisition or development projects in a large organisation; risk assessment methods and tooling; and the planning, design and implementation of security components. /li liWorking knowledge of the organisation's security policy framework and its supporting directives. /li liTime spent in an international environment with both military and civilian colleagues, and a working picture of how the alliance's commands are organised. /li liRelevant certification such as CISA or CISSP. /li liEnglish you can defend a risk position in, in writing and in front of a board. /li /ul pExtensions are offered where the work goes well. Applications are reviewed as they arrive. /p /p