Cyber Security Assessor

Who we are:

For more than 70 years, NATO's mission has been to preserve peace and security in the Alliance for nearly one billion citizens. The NATO Communications and Information Agency (NCIA) and its predecessors have worked tirelessly in providing the means that enable the connectedness and togetherness that keep our Alliance strong. We are the NCIA, a team of 3000 civilian and military staff in 29 locations throughout Europe, North America and Asia.

Our technology and cyber experts allow NATO to conduct critical operations, protect NATO's airspace, make data-driven decisions, defend against cyber‑attacks, secure NATO networks and maintain superiority in space. This is all possible because of our greatest force, our people. In order to keep this edge we aim to hire, train and retain the very best staff.

Our staff members represent both the diversity and unity of our Alliance. When you join the NCIA, you will be part of an organization where you can contribute authentically to the mission and purpose of NATO and help us keep our technological edge.

Based in Mons, Belgium you will join the Agency as we embark on a journey to transform our IT services to support NATO's Digital Endeavour. You will join NATO Cyber Security Centre (NCSC), which is responsible for planning and executing all lifecycle management activities for cyber security. In executing this responsibility, NCSC provides specialist cyber security‑related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Communications and Information Systems (CIS).

We are looking for a driven and enthusiastic Cyber Security Assessor who will take on the following roles and responsibilities:

• Information security: communicate security risks and issues to business managers and others;
• Information assurance: follow standard approaches for the technical assessment of information systems against information assurance policies and business objectives;
• Vulnerability management: support NCI Agency CIS Support Units and other NATO entities and customers in the process of vulnerability remediation;
• Provide CIS Security related input to NATO Directives in the Cyber Security area;
• Provide security consultancy and advice to projects, plans and teams.

For a full list of duties, please review the job description on the NCI Agency career site.

The valuable knowledge and experience that you bring to this role are:

• Bachelor's degree at a nationally recognised/certified University in a related discipline and 2 years post‑related experience. Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCI Agency, that is, at least 6 years extensive and progressive expertise in duties related to the function of the post;
• Industry leading certification in the area of Cyber Security such as SANS GIAC certifications in the 400/500 or 600 series, ISC2 CISSP and ITIL Foundation;
• At least 2 years practical experience working in cybersecurity or a related field, such as information technology, network administration, or software development;
• Extensive knowledge of Cloud System Security Services and Configuration;
• Experience in modern CIS secure deployment and configuration troubleshooting;
• Extensive experience in the contextual interpretation of Vulnerability Assessments results;
• Comprehensive understanding of the principles of computer and communications security, networking, and the vulnerabilities of modern operating systems and applications acquired through a blend of academic or professional training coupled with practical professional experience;
• Proven, professional experience and expert knowledge in at least three of the following:
  • Implementation and integration of Information Assurance protective measures;
  • Security mechanisms related to modern Web Application Security;
  • Security mechanisms and administration of UNIX/Linux operating systems;
  • Private and public cloud security;
  • Management and secure configuration of the RDBMS from industry leading vendors;
  • Ente…