Enterprise Cyber Risk Assessment Officer

Essential Qualifications/Experience:

·       The candidate must possess a university degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience

·       The candidate must have comprehensive knowledge of computer and network security principles, networking technologies, and the vulnerabilities affecting modern operating systems, applications, cloud services, and enterprise platforms

·       The candidate must have demonstrated experience in vulnerability management, cyber exposure management or cyber risk management

·       The candidate shall have demonstrable experience in vulnerability analysis, root cause analysis, and risk assessment, including mapping technical findings to business or operational impact

·       The candidate must have experience working with vulnerability management tools, risk management platforms, dashboards, or GRC solutions

·       The candidate should have experience in securing cloud-based environments and understanding cloud-specific security risks

·       The candidate must have experience in the management or delivery of cybersecurity programmes across multiple focus areas, including vulnerability management, risk management, and cyber defence

·       The candidate must have demonstrated experience working within cross-functional teams and complex reporting structures

·       The candidate must demonstrate strong English writing and speaking communication and presentation skills, including the ability to convey complex cyber security concepts to both technical and non-technical audiences

·       The candidate must demonstrate a strong security-focused and analytical mindset, with attention to detail and problem-solving capability

Desirable Qualifications/Experience:

·       Knowledge of NATO Security Policy and its supporting Directives

·       Knowledge of NATO CIS Security Accreditation processes, or equivalent national processes

·       Recognised professional certifications in cyber security, risk management, or project management

DUTIES/ROLE:

·       Risk Registry and Enterprise Risk Visibility Support

ü  Support the maintenance, enhancement, and utilisation of enterprise risk management tools, risk registries, dashboards, and decision-support capabilities. Ensure accurate registration, tracking, monitoring, and reporting of cyber, cloud, AI, and ICT risks. Maintain traceability between technical findings, vulnerabilities, threat assessments, risk treatment actions, risk acceptance decisions, and enterprise risk reporting

·       Enterprise Cyber Risk Situational Awareness and Reporting

ü  Support enterprise-wide cyber risk situational awareness by consolidating and analysing information from risk assessments, vulnerability assessments, operational reporting, threat intelligence, audits, security reviews, and accreditation activities. Produce dashboards, risk posture reports, trend analyses, executive summaries, and briefing materials to support operational and strategic decision making across NATO

·       Stakeholder Management and Coordination

ü  Engage and coordinate multiple stakeholders (technical teams, service owners, risk owners, operational authorities, security/accreditation stakeholders) across locations to align on security requirements, risk posture, and delivery priorities. Prepare and deliver briefings and decision-support materials

·       Reporting, Briefings, and Technical Communication

ü  Prepare and deliver briefings, presentations, and reports to NATO committees, Capability Panels, and working groups, clearly communicating technical concepts, progress, and recommendations related to cyber security standards

·       Support to Unforeseen and Ad Hoc Requirements

ü  The contractor shall provide support to unforeseen or ad hoc requirements within the scope of cyber security, Cloud, AI, and interoperability as requested and prioritised by CDT. Such support shall be subject to mutual agreement on scope, effort, and priority