Location: NATO Headquarters in Brussels, Belgium
Duties & Roles:
- Cloud Security Engineering & Architecture: Support the secure design and implementation of IaaS, PaaS, and SaaS cloud solutions. Assist in developing security architecture patterns, hardening baselines, secure connectivity, identity and access management, logging/monitoring, encryption, and secure CI/CD practices.
- Accreditation Support: Support end-to-end security accreditation for cloud environments and AI-enabled systems. Coordinate inputs from engineering and service teams, resolve security findings, and provide regular updates to the Security Accreditation Task Force and relevant boards.
- Cyber Risk Assessments: Conduct and coordinate cyber risk assessments for cloud services. Translate technical security vulnerabilities into enterprise-level risks, register them, and document pragmatic risk treatment options within the Enterprise Risk Management (ERM) Framework.
- Continuous Assurance & Compliance: Define continuous assurance approaches including control monitoring, vulnerability management, and configuration compliance. Support automation of compliance verification where feasible to enable operational and executive decision-making.
- Stakeholder Coordination & Technical Communication: Engage technical teams, service owners, risk owners, and security stakeholders across multiple locations. Prepare and deliver technical briefings, reports, and presentations for committees, capability panels, and working groups.
Skill, Knowledge & Experience:
Education: A university degree in a relevant technical field such as computer science, systems science, or an equivalent technical qualification.
Core Cybersecurity Technical Knowledge: Comprehensive knowledge of computer communications security, networking principles, and the vulnerabilities of modern operating systems, applications, and cloud layers.
Professional Experience: Senior experience in cloud security engineering, control implementation, and securing enterprise cloud environments. Experience defining and implementing security architectures using Zero Trust principles.
Risk Management & Analysis: Proven experience in cyber risk management, security governance, and vulnerability analysis (mapping technical findings directly to business or operational impact). Experience managing or delivering cybersecurity programs across incidents, risk, and cyber defense.
Frameworks & Methodologies: Knowledge of risk/security frameworks (such as ISO 27001/27005, NIST, or equivalent) and project management skills within a cyber defense domain. Strong English writing, presentation, and facilitation skills.
Desirable Elements: Knowledge of NATO Security Policy, Directives, the Digital Policy Committee (DPC) substructure, and NATO CIS Security Accreditation processes. Professional certifications such as CCSP (Certified Cloud Security Professional), CISM, or CRISC are highly valued.
Clearance: A valid NATO Secret security clearance is mandatory.