CyberSecurity Leagal & Privacy Advisor
Pubblicato il 25-08-2026 - Appsierra Group in Sant'Agostino
- Definition of compliance requirements for JRC information‑system controls, in close collaboration with the System owners and System managers
- Preparation of templates covering security processes, controls and technical solutions across all JRC digital services
- Support System Owners and IT service providers with the elaboration of their:
- Business Impact Assessment and Scope of Security
- Risk Assessment exercise
- Security Plan
- Secure System Architecture Design
- Implementation Plan
- Assistance with the management of remediation activities, including tracking of non‑conformities, assignment of corrective actions to system owners and verification of their closure within agreed time‑frames
- Development and maintenance of security baselines for the JRC systems and services
- Coordination and review of risk‑assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documented
- Reporting of compliance status to the JRC LISO, highlighting gaps and progress on remediation
- Interaction with system owners and IT service providers and other relevant Commission services to ensure consistent in
Requirements:
- 2 years of post-secondary education or higher
- Good knowledge of ISO27000 family of standards, the EC Security Policies, the EC Risk‑management methodology and related risk‑assessment techniques
- Good experience in the security domain, including the development and review of security methodologies, Business Impact Assessments,
Risk Assessments and Secure System Architecture Design
- Ability to review draft Security Plans and related security‑plan material efficiently and fast
- Ability to give business and technical presentations to system owners, IT service providers
- Ability to apply high quality standards in documentation, template creation and guidance material for security planning
- Ability to cope with fast changing technologies used in cloud services, AI‑driven applications and other digital services within the JRC environment
- Very good communication skills with technical and non-technical audiences to facilitate multilingual, multicultural meetings and stakeholder engagement
- Analysis and problem solving skills
- Capability to write clear and structured technical documents
- Ability to participate in technical meetings and good communication skills
- Relevant certifications in Governance, Risk and Compliance or Risk Management and Audit or broad Cybersecurity are an advantageous asset (CGRC, CRISC, CISA, CISSP, CISM, etc..)
- Ability to integrate in an international/multicultural environment, rapid self-starting capability and experience in working in team;
- Ability to participate in multilingual meetings;
- Ability to work in multi-cultural environment, on multiple large projects;
- Ability to establish trusting relationships with counterparts in partnering organizations;
- Excellent team player
- Ability to understand, speak and write English C1 will be an advantage;
- High degree of discretion and integrity.