Enterprise Cyber Risk Assessment Officer

This is an opportunity for an Enterprise Cyber Risk Assessment Officer at NATO Headquarters in Brussels. The duties include conducting enterprise-level cybersecurity risk assessments across NATO ICT systems, cloud services, digital platforms and AI-enabled capabilities; performing qualitative and quantitative risk analysis to identify, assess, prioritise and communicate cybersecurity risks; developing risk assessment methodologies; supporting the development, implementation and continuous improvement of NATO's Enterprise Risk Management Framework; assessing cybersecurity risks associated with cloud services, artificial intelligence and emerging technologies; developing and maintaining risk methodologies, taxonomies, metrics, reporting standards and governance procedures; maintaining and enhancing enterprise risk registers, dashboards and risk management tools; consolidating and analysing information from vulnerability assessments, threat intelligence, audits and security reviews; producing cybersecurity risk reports, dashboards, trend analyses and executive summaries; coordinating with technical teams, service owners and stakeholders; preparing and delivering presentations to NATO committees and working groups; and providing ad hoc support for cybersecurity, cloud, AI and interoperability-related requirements.

Essential requirements include a university degree in a relevant technical field, comprehensive knowledge of computer and network security principles, demonstrable experience in vulnerability management or cybersecurity risk management, experience in vulnerability analysis and risk assessment, experience with vulnerability management tools and GRC solutions, experience securing cloud-based environments, experience managing or delivering cybersecurity programmes, experience working in cross-functional teams, excellent written and spoken English communication skills, strong analytical and problem-solving mindset, and active NATO SECRET Security Clearance.

Desirable requirements include knowledge of NATO Security Policy, NATO CIS Security Accreditation processes, and recognised professional certifications.

Working conditions: full-time, five days per week on-site at NATO Headquarters; very limited teleworking may be permitted from the contractor's residence in Belgium; no teleworking from locations outside Belgium; standard office hours with occasional non-standard hours; and business travel may be required.