60% remote work

Oversight and support to Information Security and NATO CIS Security Accreditation activities. This includes provision of relevant expertise, direct support to specific projects and the conduct of security risk assessments. Specific duties include:

Project Support: security design, CIS Security Risk Assessment, security requirements, security testing and validation, interoperability and security operating procedures;

Information security: advise on security aspects to manage identified risks and ensure adoption and adherence to standards for complex ISR information systems. Develop security architectures that mitigate the risks;

Information assurance: Interpret and apply information assurance and security policies to manage risks. Plan and conduct information assurance and security accreditation of complex crossfunctional domains and areas, cross-functional areas;

Risk management: Plan and implement complex security risk management activities within a specific function, technical area, project or programme. Implement consistent and reliable security risk management processes and reporting to key stakeholders.

Vulnerability assessment/ Penetration Testing: Plan and manage vulnerability assessment and/or penetration testing activities

Requirements Description:

A minimum of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience. Exceptionally, the lack of a university degree may be compensated by the demonstration of 10 years particular abilities or experience of interest to NCIA.

A professional Qualification CIS Security e.g. CompTIA Security+/ CISM/ ISC2 - CISSP, and/or equivalent certification);

Risk Management certification or equivalent

Knowledge of NATO or national processes for ATO.

Experience with PILAR or (RMF) risk management framework.

Knowledge of common IT security frameworks and governance models.

Knowledge of NATO responsibilities and organization to include NATO Security Policy and supporting directives.

Knowledge of NATO responsibilities and organization, including ACO