CyberSecurity Leagal
Pubblicato il 24-08-2026 - Appsierra Group in Terre del Reno
- Definition of compliance requirements for JRC information‑system controls, in close collaboration with the System owners and System managers
- Preparation of templates covering security processes, controls and technical solutions across all JRC digital services
- Support System Owners and IT service providers with the elaboration of their:
- Business Impact Assessment and Scope of Security
- Risk Assessment exercise
- Security Plan
- Secure System Architecture Design
- Implementation Plan
- Assistance with the management of remediation activities, including tracking of non‑conformities, assignment of corrective actions to system owners and verification of their closure within agreed time‑frames
- Development and maintenance of security baselines for the JRC systems and services
- Coordination and review of risk‑assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documented
- Reporting of compliance status to the JRC LISO, highlighting gaps and progress on remediation
- Interaction with system owners and IT service providers and other relevant Commission services to ensure consistent in
Requirements:
- 2 years of post-secondary education or higher
- Good knowledge of ISO27000 family of standards, the EC Security Policies, the EC Risk‑management methodology and related risk‑assessment techniques
- Good experience in the security domain, including the development and review of security methodologies, Business Impact Assessments, Risk Assessments and Secure System Architecture Design
- Ability to review draft Security Plans and related security‑plan material efficiently and fast
- Ability to give business and technical presentations to system owners, IT service providers
- Ability to apply high quality standards in documentation, template creation and guidance material for security planning
- Ability to cope with fast changing technologies used in cloud services, AI‑driven applications and