Officer, Cyber Security Audit at NATO

, , -

Full Time

Start Date

Immediate

Expiry Date

12 Feb, 26

Salary

0.0

Posted On

14 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security, Information Systems, Cloud Computing, Edge Computing, Fog Computing, DevSecOps, Artificial Intelligence, Zero Trust, Data Centric Security, Vulnerability Assessments, Penetration Testing, Policy Development, Stakeholder Management, Security Risk Assessment, Incident Handling, Cyber Forensics

Industry

IT Services and IT Consulting

Description

**Through this competition we are also aiming to select a potential candidate for a post Security Accreditor, Classified Communication and Information Systems (CIS), G15/G17 (pending budget approval) ** Please find description of the above mentioned post here: https://www.nato.int/content/dam/nato/webready/documents/hr/2025/N2030_26-b1_JIS0XXX_SecurityAccreditor_FINAL.pdf 1. SUMMARY The Joint Intelligence and Security (JIS) Division, under the leadership of the Assistant Secretary General (ASG) for Intelligence and Security, comprises two principal pillars: Intelligence headed by the Deputy ASG for Intelligence (DASG-I); and the NATO Office of Security (NOS) headed by the Deputy ASG for Security (DASG-S) / Director NOS. The NOS is responsible for the overall coordination of NATO security among member Nations, NATO civil and military bodies as well as International Organisations and partner countries with which NATO cooperates. It is also responsible for the security of the NATO Headquarters (HQ) and its personnel in Brussels, for the protection of the Secretary General and for the security and safety of its personnel in and on missions abroad. The NOS comprises the Office of the Director, the Security and Policy Oversight Branch (SPOB), the Protective Security and Emergency Services Branch (PSESB), the Close Protection Unit (CPU) and the Security Intelligence Branch (SIB). The SPOB is responsible for ensuring that NATO Security Policy is applied throughout NATO bodies and member Nations and as well as in non-NATO Nations and organisations, as appropriate, with which NATO cooperates. JISD/NOS/SPOB develops security policy and directives, supports their implementation and verifies compliance through security audits in the specific functional areas of personnel security, physical security, security of information, communication and information systems security (CIS Security also known as Cyber Security) and industrial and protective security. JISD/NOS/SPOB works with the other JISD branches to ensure coordinated and consistent responses to the interpretation and practical application of policy. Within the JISD/NOS/SPOB, the Cyber Security Section, delivers the following three key functions: (i) security accreditation of NATO CIS, (ii) security inspections and surveys in nations and other NATO or non-NATO entities, as well as (iii) maintenance and development of CIS-related security policies and directives. The incumbent, under the direction of the Section Head, will be responsible, inter alia, for security accreditation of NATO CIS according to NATO’s Security Policy as well as for the maintenance of the Cyber Security policy framework. They will also carry out the Cyber Security audits in NATO bodies as well as security surveys in non-NATO entities. 2. QUALIFICATIONS AND EXPERIENCE ESSENTIAL The incumbent must: • possess a university degree, or an equivalent level of qualification, in cyber security, information systems or relevant scientific discipline; • have 5 years of experience within a large organisation in a cyber security role, preferably in an Industry, an International Organisation, or a National Security Authority; • possess a thorough understanding of Cyber Security international standards and best practices; • demonstrate experience in Cloud, Edge, Fog Computing and its deployment models; • have a deep understanding in one of the following concepts: DevSecOps, Artificial Intelligence, Zero Trust, or Data Centric Security; • have proven experience in vulnerability assessments and penetration testing; • demonstrate excellent written skills and the ability to draft clear and concise policies and reports, in particular the ability to present complex CIS security issues in simple terms in order to facilitate consensus and decision-making at the highest governance and management levels; • demonstrate mature judgement, political sensitivity and the ability to instil confidence in their direct dealings with senior civilian and military officials; • possess the following minimum levels of NATO’s official languages (English/French): V (“Advanced”) in one; I (“Beginner”) in the other; • be prepared to work outside normal office hours and travel extensively as required, occasionally on short-notice. DESIRABLE The following would be considered an advantage: • experience in incident handling and knowledge of cyber forensics procedures; • experience in the area of Security Risk Assessment/Management (SRA/SRM); • have a deep understanding in several of the following concepts: DevSecOps, Artificial Intelligence, Zero Trust, Data Centric Security, Software-Defined Networking, and Service Oriented Architecture; • knowledge of threat hunting and purple team techniques and principles; • knowledge of project and programme management; and • professional certification(s) in Cyber security. 3. MAIN ACCOUNTABILITIES Project Management Carry out and coordinate security audits for NATO CIS, as directed by the Section Head. Conduct security evaluations for NATO CIS services and advise/coordinate the planning and implementation of Cyber Security provisions in NATO-wide projects including the involvement of industry in those projects. Assist the other NOS branches and divisions in NATO Headquarters in assessing the Cyber Security posture of NATO networks. Participate in NOS security surveys, with particular reference to Cyber Security, in partner nations and international organisations. Expertise Development Provide Cyber Security advice and guidance to NATO Nations, NATO civil and military bodies and partner nations and international organisations. Proactively keep up-to-date with the latest cyber security trends and technologies. Orchestrate the education and training efforts on security accreditation towards relevant stakeholders. Knowledge Management Based on briefings, discussions and investigations assess the security programmes in place in NATO nations, NATO civil and military bodies, and non-NATO nations / international organisations. Maintain an Information and Knowledge Repository for increased situational awareness. Support Education and Training sessions on Cyber Security and Security Accreditation for a NATO-wide audience and industry. Policy Development Draft policy, directive and guidance documents on Cyber Security, as required. Stakeholder Management Mediate between diverse stakeholder with different interests such as CIS Operational Authorities, CIS Planning and Implementation Authorities, CIS Providers, and CIS Security Officers. Write comprehensive reports for use by the responsible national and/or security authorities. Representation of the Organization Represent the NOS on security accreditation and Cyber Security related boards, committees and working groups, as directed by the Head, Cyber Security. Perform any other related duty as assigned. 4. INTERRELATIONSHIPS The incumbent reports to the Head, Cyber Security in the JISD/NOS/SPOB and will deal with senior government and military personnel in NATO and partner nations, NATO civil and military bodies, and in non-NATO nations and organisations. Direct reports: N/A Indirect reports: N/A. 5. COMPETENCIES The incumbent must demonstrate: • Achievement: Creates own measures of excellence and improves performance; • Analytical Thinking: Sees multiple relationships; • Change Leadership: Expresses vision for change; • Impact and Influence: Uses indirect influence; • Initiative: Is decisive in a time-sensitive situation; • Organisational Awareness: Understands organisational politics; • Teamwork: Solicits inputs and encourages others. 6. CONTRACT Contract to be offered to the successful applicant (if non-seconded): Definite duration contract of three years; possibility of renewal for up to three years, during which the incumbent may apply for conversion to an indefinite duration contract. Contract clause applicable: In accordance with the contract policy, this is a post in which turnover is desirable for political reasons in order to be able to accommodate the Organisation's need to carry out its tasks as mandated by the Nations in a changing environment, for example by maintaining the flexibility necessary to shape the Organisation's skills profile, and to ensure appropriate international diversity. The maximum period of service foreseen in this post is 6 years. The successful applicant will be offered a 3-year definite duration contract, which may be renewed for a further period of up to 3 years. However, according to the procedure described in the contract policy the incumbent may apply for conversion to an indefinite contract during the period of renewal and no later than one year before the end of contract. If the successful applicant is seconded from the national administration of one of NATO’s member States, a 3-year definite duration contract will be offered, which may be renewed for a further period of up to 3 years subject also to the agreement of the national authority concerned. The maximum period of service in the post as a seconded staff member is six years. Serving staff will be offered a contract in accordance with the NATO Civilian Personnel Régulations. NOTE: Irrespective of previous qualifications and experience, candidates for twin-graded posts will be appointed at the lower grade. Advancement to the higher grade is not automatic, and will not normally take place during the first three years of service in the post. Under specific circumstances, serving staff members may be appointed directly to the higher grade, and a period of three years might be reduced by up to twenty four months for external candidates. These circumstances are described in the IS directive on twin-graded posts. 7. USEFUL INFORMATION REGARDING APPLICATION AND RECRUITMENT PROCESS Please note that we can only accept applications from nationals of NATO member countries. Applications must be submitted using e-recruitment system, as applicable: For NATO civilian staff members only: please apply via the internal recruitment portal (link); For all other applications: www.nato.int/recruitment Before you apply to any position, we encourage you to click here and watch our video providing 6 tips to prepare you for your application and recruitment process. Do you have questions on the application process in the system and not sure how to proceed? Click here for a video containing the information you need to successfully submit your application on time. More information about the recruitment process and conditions of employment, can be found at our website (http://www.nato.int/cps/en/natolive/recruit-hq-e.htm) Appointment will be subject to receipt of a security clearance (provided by the national Authorities of the selected candidate), approval of the candidate’s medical file by the NATO Medical Adviser, verification of your study(ies) and work experience, and the successful completion of the accreditation and notification process by the relevant authorities. NATO will not accept any phase of the recruitment and selection prepared, in whole or in part, by means of generative artificial-intelligence (AI) tools, including and without limitation to chatbots, such as Chat Generative Pre-trained Transformer (Chat GPT), or other language generating tools. NATO reserves the right to screen applications to identify the use of such tools. All applications prepared, in whole or in part, by means of such generative or creative AI applications may be rejected without further consideration at NATO’s sole discretion, and NATO reserves the right to take further steps in such cases as appropriate. 8. ADDITIONAL INFORMATION NATO is committed to diversity and inclusion, and strives to provide equal access to employment, advancement and retention, independent of gender, age, nationality, ethnic origin, religion or belief, cultural background, sexual orientation, and disability. NATO welcomes applications of nationals from all member Nations, and strongly encourages women to apply. NATO is committed to fostering an inclusive and accessible working environment, where all candidates living with disabilities can fully participate in the recruitment and selection process. If you require reasonable accommodation, please inform us during your selection process. Candidates will be required to provide documented medical evidence to support their request for accommodation. Building Integrity is a key element of NATO’s core tasks. As an employer, NATO values commitment to the principles of integrity, transparency and accountability in accordance with international norms and practices established for the defence and related security sector. Selected candidates are expected to be role models of integrity, and to promote good governance through ongoing efforts in their work. Due to the broad interest in NATO and the large number of potential candidates, telephone or e-mail enquiries cannot be dealt with. Applicants who are not successful in this competition may be offered an appointment to another post of a similar nature, albeit at the same or a lower grade, provided they meet the necessary requirements. The nature of this position may require the staff member at times to be called upon to travel for work and/or to work outside normal office hours. The organization offers several work-life policies including Teleworking and Flexible Working arrangements (Flexitime) subject to business requirements. Please note that the International Staff at NATO Headquarters in Brussels, Belgium is a non-smoking environment. For information about the NATO Single Salary Scale (Grading, Allowances, etc.) please visit our website. Detailed data is available under the Salary and Benefits tab. NATO does not charge any application, processing, training, interviewing, testing or other fee in connection with the application or recruitment process. For more info please click here.

Responsibilities

The incumbent will be responsible for security accreditation of NATO Communication and Information Systems (CIS) and the maintenance of the Cyber Security policy framework. They will also conduct Cyber Security audits and security surveys in NATO bodies and non-NATO entities.