Communication Information System Security Supervisor; Information Assurance

Post Context

Supreme Headquarters Allied Powers Europe (SHAPE) provides an integrated Strategic Effects framework, employing a multi-domain and multi-region focus to create a 360‑degree approach, with the flexibility to enable, upon direction, a seamless transition from Baseline Activities and Current Operations (BACO) up to the Maximum Level of Effort (MLE). SHAPE supports SACEUR in fulfilling his terms of reference, as directed by the North Atlantic Council.

The Operations Directorate is responsible for monitoring the strategic environment and manages current operations for the Supreme Allied Commander Europe (SACEUR). It directs and oversees all assigned operational and intelligence functional area activities through the J2 and the J3 divisions, coordinates the contribution of niche forces and capabilities (Joint Effects, Nuclear Operations, Office of the Provost Marshal, and Allied Command Counter Intelligence), and tasks MOU organizations (NIFC, JEWCS).

The J2 Division provides comprehensive advice, warning, and situational awareness to the Command Group (CG) and Allied Command Operations (ACO) on Intelligence, Counter‑Intelligence, Security, Information Security, Biometrics and Identity Intelligence, Geospatial, Joint Intelligence, Surveillance, Reconnaissance (including ISTAR). It maintains staff responsibility and supervision for Counter‑Intelligence and Security within ACO and liaises with Nations, NATO International Staff and NATO International Military Staff (IMS), Allied Command Transformation (ACT), Subordinate Commands and other organizations as directed.

The J2X Branch provides Security governance and oversight of NATO Command Structure (NCS) elements, security awareness and training, security policy development, and advice on security policy implementation, including advice on sharing of intelligence and information with non‑NATO entities. It executes Communication and Information Systems security accreditation and inspections, and provides Information Security awareness and training, policy advice and development.

The Information Assurance Section (IA) executes Communication and Information Systems (CIS) security accreditation on behalf of the ACO Security Accreditation Authority (SACEUR), represents the ACO Security Accreditation Authority at NATO and ACO security accreditation boards, conducts CIS security inspections, exercises CIS security oversight in support of the CIS Operational Authority (CISOA), supports CIS Security incident management, provides Information Security awareness and training, policy advice and development, and provides relevant CIS Security support to all CISOAs within ACO.

• Develop the long‑term ACO Information Assurance (IA) programme and implement awareness policy, including producing IA educational/training material, organising/conducting IA workshops ACO‑wide, and providing ACO inputs to NATO training courses that incorporate IA elements.
• Provide direct support to NATO missions, including mission‑specific IA policy development and deploying to operational theatres as an IA advisor, as required.
• Provide IA policy advice and security risk management guidance.
• Contribute to the development of ACO IA policies.
• Participate in the ACO liaison with industry and NATO agencies, as required, on IA‑related matters, ensuring current and relevant technical knowledge is regularly fed into the IA Section.
• Support the evaluation/assessment of IA threat vectors and promote relevant counter‑measures, incorporating the output into ACO policy, CD efforts, IA awareness programmes and training.
• Support the definition and evaluation of cyber threat vectors and counter‑measures from a cyber intelligence perspective.
• Provide IA risk assessments for specific major ACO CIS.
• Conduct security‑oversight inspections and support investigations on sub‑commands and NATO missions, as required.
• Attend additional NATO/International IA working groups as required.
• Supervise on behalf of the NATO Security Accreditation Board the security evaluation of software within the NCIA.

The incumbent may be required to undertake deployments in support…