Computer Security Reviewer (IT-GOV-CSO-2024-117-GRAP)

at  CERN

Job Description

ABOUT US

At CERN, the European Organization for Nuclear Research, physicists and engineers are probing the fundamental structure of the universe. Using the world’s largest and most complex scientific instruments, they study the basic constituents of matter - fundamental particles that are made to collide together at close to the speed of light. The process gives physicists clues about how particles interact, and provides insights into the fundamental laws of nature. Find out more on http://home.cern.
We are on a Quest. A Journey into discovery like no other. Bring your expertise to our unique work and develop your knowledge and skills at pace. Join world-class subject matter experts on unique projects, in a Quest for greater knowledge and deeper understanding.
Begin your CERN Quest. Take Part!
Diversity has been an integral part of CERN’s mission since its foundation and is an established value of the Organization. Employing a diverse workforce is central to our success

CERN runs a plethora of on-site and cloud-based IT services including MS Azure and Google Workspace cloud services as well as local control systems. Based on standard IT technologies but also on in-house developments, these IT services require a permanent adaptation of their security stance commensurate with CERN’s risk appetite. The CERN Computer Security Team is mandated to protect the operations and reputation of the Organization, including those IT services, against any kind of cyber-threat.

As a successful candidate you will take an active role in reviewing and improving the security of those IT services:

• Reviewing autonomously or inside a team newly developed or purchased IT services as well as those subject to essential changes with regards to security principles (like the CISv8 standard);
• Providing consultancy and suggestions on furtherly improving the security posture of said IT services;
• Maintaining a CERN-wide review plan and register for “security” as well as CERN’s risk-register linked to “security"-related risks.

Furthermore, we offer you the possibility to delve into pure security operations, running separately your own security project(s), and contributing to incident handling in the CERN CSIRT.