Cyber Security Expert

pullibIn accordance with the Service Regulations, staff are required to reside either at their place of employment or at such distance from it as is compatible with the proper performance of their duties. /b /lilibNature of competition: /b Internal and external competition /lilibApplicable regulations: /b General conditions of employment governing servants at the EUROCONTROL Maastricht Centre /lilibDuration of appointment: /b 5 Year(s)
- renewal or conversion of the contract is possible under certain conditions see “Useful information” section /lilibSecurity clearance: /b Security vetting may be required in accordance with the relevant EUROCONTROL security provisions /lilibDirectorate/Service: /b MUAC/SQCS/CS
- The Corporate Security Team /lilibWorking arrangement: /b EUROCONTROL operates a hybrid working model, combining onsite presence with teleworking opportunities. Teleworking is subject to the applicable internal rules and is granted in line with business needs and managerial approval.
Teleworking must not exceed 50% of the days worked in a month when performed at the official place of residence as defined above.
In addition, all staff may telework from a location of their choice for up to 20 working days per calendar year, with line manager authorisation. These 20 days do not count towards the 50% monthly limit. /lilibReserve list: /b Applicable
- See details in the "Useful information" section /li /ulh3Your team /h3pWithin the The Directorate Maastricht Upper Area Control Centre , The Safety, Quality, Compliance and Security Management (SQCS) unit manages MUAC's safety, quality, compliance and security processes. The unit is also responsible for the overall management of the integrated MUAC Management System including the assurance of its effective and efficient operation. Furthermore, the MUAC Security Operations Center (SOC) is part of SQCS. /ph3Your role /h3pYour role will be to: /pulliProvide technicalexpertise,guidanceandcontributionstothedefinition of security requirements, the development and the execution of security-related policies, procedures, and action plans to ensure the protection of mission critical networks,systemsand services, on site and/or in the cloud. /liliContribute to the development of methods, tools, and guidance to support a harmonised approach to security management, ensuring alignment with the regulatory framework and international standards. /liliSolve cyber security incidents,participatein crisis management activities, and ensure the organisation is prepared to handle emergencies effectively. /liliAudit andmonitorthe effectiveness of security measures and service providers, ensuring compliance with internal policies and external regulations. /liliCollaborate with internal teams on cyber security and serve as a subject matter expert to advise management and stakeholders on cyber security issues, including regulatory compliance and operational impact. /liliConduct security(risk)assessments, including critical supplier risk assessments, analysevulnerabilitiesandidentifysolutions and corrective actions, and report on findings.
Conduct activities addressing fraudulent cyber activities affecting the Agency as well as stakeholders. /liliMonitor and analyse the aviation cyber threat landscape, conduct cyber threat intelligence (CTI)analysesand produce CTI reports. /liliProvide technical oversight on the effectiveness of cyber security related controls and tools andidentifypotential technical and procedural gaps for further development and/or enhancements. /liliDevelop the content of training programs and deliver courses providing guidance and support in cyber security. Develop and deliver security awareness related activities. /liliCollaborate with internal and external partners,andparticipatetoevents, workshops,meetings, etcand projects to shareexpertiseand contribute to initiatives in cyber security. /liliProduceand/or contribute totechnical documents to document analyses,findingsand recommendations. /liliContribute to tender specifications and evaluation of offers. Monitor contracts’ performance, identifyingissues and ensuring adherence to contractual requirements. /liliStay updated on latest technological developments/methods/best practices/trends and share them within the internal community to enhance organisational knowledge. /liliCarry out any other task in line with the main purpose of the job. /li /ulh3Required qualifications, experience competencies /h3ulliCompletion of relevant third level studies (IT and/or security studies), meeting European Qualifications Framework (EQF) Level 6 followed by at least 4 years relevant professional experience to carry out the advertised responsibilities. /liliCompletion of relevant third level studies (IT and/or security studies) meeting EQF Level 7 followed by at least 3 years relevant professional experience to carry out the advertised responsibilities. /liliInternal candidates can check on the intranet to see what level of in-hous