Compliance Specialist
Pubblicato il 07-09-2026 - Changetheblock in Pavia
The JRC Local Informatics Security Officer (LISO) with in the directorate JRC.T (Digital Transformation, AI and Data), in partnership with other Commission services and stakeholders, has among his responsibilities to ensure that, in JRC, adequate security measures are in place and operational for the information systems and their supporting IT infrastructures, enabling the successful implementation of the Commission's Digital Transformation and EU policies.
The Commission's adopted comprehensive standards on Information Systems Security, established through Decision 2017/46, mandate that all critical information receives appropriate protection levels consistently across the European Commission. These standards require that suitable security controls are systematically identified and integrated into Commission Information Systems.
To support the JRC System Owners and IT service providers in being compliant with these requirements, the LISO requires specialized technical expertise to advise on the implementation of the EC cybersecurity policy within JRC,
conduct reviews of processes and controls to assess their effectiveness and overall alignment with the EC regulatory frameworks and policies.
Description of the tasks
The external service provider will perform the following tasks:
Definition of compliance requirements for JRC information‑system controls, in close collaboration with the System owners and System managers
Preparation of templates covering security processes, controls and technical solutions across all JRC digital services
Support System Owners and IT service providers with the elaboration of their:
Business Impact Assessment and Scope of Security
Risk Assessment exercise
Security Plan
Secure System Architecture Design
Implementation Plan
Assistance with the management of remediation activities, including tracking of non‑conformities, assignment of corrective actions to system owners and verification of their closure within agreed time‑frames
Development