CyberSecurity Leagal & Privacy Advisor

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7iwcxu

pullipDefinition of compliance requirements for JRC information‑system controls, in close collaboration with the System owners and System managers /p /lilipPreparation of templates covering security processes, controls and technical solutions across all JRC digital services /p /lilipSupport System Owners and IT service providers with the elaboration of their: /p /li /ulullipBusiness Impact Assessment and Scope of Security /p /lilipRisk Assessment exercise /p /lilipSecurity Plan /p /lilipSecure System Architecture Design /p /lilipImplementation Plan /p /li /ulullipAssistance with the management of remediation activities, including tracking of non‑conformities, assignment of corrective actions to system owners and verification of their closure within agreed time‑frames /p /lilipDevelopment and maintenance of security baselines for the JRC systems and services /p /lilipCoordination and review of risk‑assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documented /p /lilipReporting of compliance status to the JRC LISO, highlighting gaps and progress on remediation /p /lilipInteraction with system owners and IT service providers and other relevant Commission services to ensure consistent in /p /li /ulpbRequirements: /b /pullip2 years of post-secondary education or higher /p /lilipGood knowledge of ISO27000 family of standards, the EC Security Policies, the EC Risk‑management methodology and related risk‑assessment techniques /p /lilipGood experience in the security domain, including the development and review of security methodologies, Business Impact Assessments,



Risk Assessments and Secure System Architecture Design /p /lilipAbility to review draft Security Plans and related security‑plan material efficiently and fast /p /lilipAbility to give business and technical presentations to system owners, IT service providers /p /lilipAbility to apply high quality standards in documentation, template creation and guidance material for security planning /p /lilipAbility to cope with fast changing technologies used in cloud services, AI‑driven applications and other digital services within the JRC environment /p /lilipVery good communication skills with technical and non-technical audiences to facilitate multilingual, multicultural meetings and stakeholder engagement /p /lilipAnalysis and problem solving skills /p /lilipCapability to write clear and structured technical documents /p /lilipAbility to participate in technical meetings and good communication skills /p /lilipRelevant certifications in Governance, Risk and Compliance or Risk Management and Audit or broad Cybersecurity are an advantageous asset (CGRC, CRISC, CISA, CISSP, CISM, etc..) /p /lilipAbility to integrate in an international/multicultural environment, rapid self-starting capability and experience in working in team; /p /lilipAbility to participate in multilingual meetings; /p /lilipAbility to work in multi-cultural environment, on multiple large projects; /p /lilipAbility to establish trusting relationships with counterparts in partnering organizations; /p /lilipExcellent team player /p /lilipAbility to understand, speak and write English C1 will be an advantage; /p /lilipHigh degree of discretion and integrity. /p /li /ul /p #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7iwcxu