Staff Officer (Cyber Sec/CIS Sec Acc)

The Staff Officer supports the ACO Security Accreditation Authority by accrediting CIS systems and projects related to NATO's Digital Backbone and technology transformation. The role involves working with project teams to gather cyber requirements, guide accreditation processes, conduct security audits, and support CIS security and information assurance activities.

Responsibilities

• Support the ACO SAA for the security accreditation of all relevant CIS projects and systems, supporting project staffs and system management groups on collection of CIS cyber requirements and accreditation matters throughout the CIS life-cycle.
• Provide accreditation for newly identified CIS under direction and guidance of CIS Security Supervisor Information Assurance Inspector.
• Support and execute security audits of CIS and contribute to security inspections, support improvements and developments of CIS to meet NATO security requirements and standards.
• Maintain working level staff liaison with NATO CIS Operational Authorities on Accreditation matters including Risk Management under Cyber Risk Management Group (CRMG).
• Support collection of requirements and implementation of new accreditation tools.
• Support Section staff officer’s duties in accreditation efforts of NATO CIS with special attention to Maritime CIS and advance consultation Networks.
• Support evaluation/assessment of Information Assurance threat vectors and IA Risk Assessments as well as evaluate systems’ test results and vulnerability assessment reports.
• Attend meetings/events regarding CIS Security and Information Assurance on behalf of the section.
• Support workshops, training events and exercises, as required.

Requirements

• University Degree in information security, computer science, audit, mathematics, statistics, business administration or related discipline and 1 year post-related experience, or Higher Secondary education and completed advanced vocational training in that discipline leading to a professional qualification or professional accreditation and 2 years of post-related experience.
• Experience in information security.
• Experience conducting assessments of network security tools, firewalls and internet security, sustainability, real-time systems, application design, and/or asset management.
• English language proficiency at SPL 3333 level (Listening, Speaking, Reading and Writing).
• Desirable: Experience as a CIS Security Engineer.
• Desirable: Specialist either in CIS or in Security and cross-trained in INFOSEC.
• Desirable: Background in military security work covering all aspects of physical security, document security, personnel security, and information assurance.

Skills

• Information Security
• Network Security Assessment
• Firewall Management
• Internet Security
• Real-time Systems Security
• Application Design Security
• Asset Management
• Safety Audits
• CIS Security Engineering
• Information Assurance
• Security Accreditation
• Cybersecurity Requirements Gathering
• Physical Security
• Document Security
• Personnel Security

Languages

English