EUCI Information Security & Risk Officer

We welcome applications from candidates that meet the following selection criteria:

A. Essential

Only applications meeting all essential selection criteria will be assessed.

(1) Professional

Candidates will be required to demonstrate the following qualifications:

• a University degree (or equivalent academic degree) in computer science, information technologies, engineering, or similar discipline;
• good knowledge of, and proven professional experience of at least 3 years (acquired after the award of the academic qualification required as a condition of eligibility) in:
  • implementing and maintaining Information Security standards such as ISO-27001, NIST-800-53, etc. in EU/Government Organizations and/or Private sector;
  • implementing Risk Management Frameworks towards managing cybersecurity risks in public and/or private sectors;
  • handling EUCI and its governance rules and regulations.
• professional experience in drafting policies and delivering presentations to management in support of decision-making;
• experience in organising and managing meetings and workshops in multinational settings;
• a track record of delivering successful business outcomes;
• an interest in and a good understanding of the EDA’s main tasks and functions;
• a very good command of written and spoken English.

(2) Personal

All staff must be able to fit into the Agency's way of working (see para. 2). Other attributes important for this post include:

• ability to collaborate within a team and work independently within their area of responsibility;
• ability to work effectively in a multinational environment;
• focus on results and high motivation;
• flexibility and innovation;
• confidentiality and integrity;
• genuine commitment to the Agency's objectives;
• strong conceptual, drafting, interpersonal, and analytical skills.

B. Desirable

The following will be considered an advantage:

• professional experience in, and good knowledge of, TEMPEST technologies and requirements in infrastructure and CIS;
• hold recognised information security certifications such as ISO-27001 LA/LI, CISM, CISSP;
• experience in organising and managing meetings and workshops in EU Institutions/Agencies and/or international Organizations;
• experience in Risk management activities in EU Institutions/Agencies and/or international Organizations;
• data analysis skills to inspect, clean, transform, and model data to extract insights and support decision-making;
• hold a (recognised) Project Management qualification.