Cyber Security Officer

Duties:

• Maintain personal core competencies (functional and technical) in the Information Assurance, supervise staff and Subject Matter Experts (SME) temporarily assigned to the section;
• Plan, direct and coordinate, in close corporation with Cyber Security SL, the internal development of security architectures for large-scale systems, networks, and infrastructure solutions;
• Apply excellent expertise and provide recommendations in the development of conceptual, logical, and technical security architecture artefacts;
• Apply knowledge of a variety of hardware and software security capabilities and features, resolve security and non-security requirement conflicts, and collaborate with team leaders, scientists and developers to appropriately convert functional needs into technical security requirements;
• Coordinate with systems and network administrators in support of security architecture requirements;
• Identify security-related Key Performance Indicators and generate reports to ensure full visibility of the overall NCIA Information Security posture;
• Coordinate and oversee vulnerability assessment testing and penetration testing performed on NCIA networks. Support all phases of the security accreditation processes required to maintain operation status;
• Plan, deploy, and configure a variety of hardware, software, and security products;
• Provide feedback, advice and guidance to senior management in the areas of enterprise architecture, NATO security accreditation activities, procurement as well as training and awareness programmes;
• In close coordination with NATO Office of Security (NOS) act as the Agency’s INFOSEC Officer;
• Conduct INFOSEC training and awareness programmes;
• Develop Business Continuity Plan in the INFOSEC area;
• Performs other duties as may be required

Requirements:

• A university degree in an Information Security relevant discipline, preferably equivalent to a Masters, or equivalent combination of appropriate qualifications and experience;
• Several years of experience (at least five years) with system security, security architecture, network security engineering, and security governance including strategic alignment, risk management, performance management and value delivery;
• Detailed knowledge and working experience of network and security technologies such as IPv6, BGP, Firewalls, Virtual Private Networks, Intrusion Detection and Forensic Appliances;
• Experience with WLAN technologies and endpoint security of mobile devices such as Laptops, PDAs and Smartphones/Blackberry devices;
• Experience with high-available/redundant systems architectures (clusters& load-balancers);
• Recent experience with enterprise backbone virtualisation technologies such as MPLS, Layer-3 VPNs, CISCO OTV and VDC.Desirable Experience and Education:
• CISM, ISACA or CISSP Certification;
• Good knowledge and working experience of Public Key Infrastructure;
• Good knowledge and working experience of Microsoft Windows Operating Systems (Windows7/Windows10);
• Knowledge of mobile data communications (Bluetooth and GPRS/UMTS);