Officer, Accreditation Support

Job Posting Organization:
The Cyber and Digital Transformation Division (CDT) is a key component of NATO, overseeing all aspects of cyber and digital transformation across the NATO Enterprise. This division was established to advance the Alliance's agenda in cyber and digital domains, integrating both civilian and military perspectives. The CDT combines the strategic insights of the International Staff (IS) with the operational expertise of the International Military Staff (IMS), ensuring that NATO's senior decision-making bodies receive coherent, credible, and actionable advice. The division plays a crucial role in enhancing NATO's cybersecurity posture and ensuring the security" style="border-bottom: 1px dotted #007bff !important;">security of its information systems across member nations.

Job Overview:
The Officer, Accreditation Support within the Cyber Operations Section (CYOP) is tasked with managing the accreditation backlog and monitoring the status of unaccredited systems throughout the NATO Enterprise. This role is pivotal in contributing to the security accreditation process for both traditional and cloud-based Communication and Information Systems (CIS) solutions. The incumbent will coordinate and prioritize Security Audits, applying a risk-based approach to ensure that cybersecurity measures are effectively implemented. The position requires performing gap analyses and supporting remediation planning in line with NATO's risk management frameworks. Additionally, the Officer will provide strategic advisory support to senior stakeholders, influencing decision-making related to the enterprise's cybersecurity posture, accreditation readiness, and risk acceptance. This role demands a proactive approach to managing cybersecurity risks and ensuring compliance with established frameworks.

Duties and Responsibilities:
The Officer, Accreditation Support will be responsible for several key duties, including:

• Policy Development: Contributing to the creation of policies, directives, and guidance documents related to enterprise security accreditation. Advising the section head on processes and procedures, and supporting policy changes in coordination with relevant authorities.
• Project Management: Participating in project management boards, maintaining cybersecurity program execution, and identifying and mitigating risks across programs.
• Stakeholder Management: Establishing a network of experts within the NATO Enterprise, fostering cooperation with the operational community, and advising senior leadership on cybersecurity risk posture.
• Knowledge Management: Drafting reports, presentations, and materials for high-level meetings, tracking accreditation status, and providing advice on evolving security programs.
• Additional Duties: Performing any other related tasks as assigned by the Team Lead, Cybersecurity Risk Management.

Required Qualifications:
Candidates must possess a university degree relevant to the position and have a minimum of 5 years of experience in the cyber operations field. They should demonstrate strong expertise in cybersecurity risk assessment, compliance frameworks such as ISO 27001, NIST, and GDPR, as well as security accreditation processes for both traditional and cloud-based solutions. Experience in designing and implementing cybersecurity governance programs, including Information Security Management Systems (ISMS) and audit readiness, is essential. Candidates should also have advanced proficiency in one of NATO's official languages (English/French) and beginner level in the other. Professional certifications relevant to the position, such as CISSP, CCSP, CISM, and project management certifications, are considered advantageous.

Educational Background:
A relevant university degree is required for this position, which should align with the responsibilities of cybersecurity operations and accreditation support. The educational background should provide a solid foundation in information technology, cybersecurity principles, and risk management frameworks.

Experience:
The position requires at least 5 years of experience in the cyber operations field. Candidates should have a proven track record of leading remote teams effectively and managing cybersecurity projects. Experience in providing executive-level reporting and coordinating multi-stakeholder environments is highly valued. Additionally, candidates should have experience in developing and improving accreditation processes within large organizations.

Languages:
Candidates must have a minimum proficiency level of V (Advanced) in one of NATO's official languages (English or French) and I (Beginner) in the other. Proficiency in additional languages may be considered an asset but is not mandatory.

Additional Notes:
The successful applicant will be offered a definite duration contract of three years, with the possibility of renewal for up to three additional years. The maximum period of service in this post is six years. The contract policy emphasizes the need for turnover for political reasons, allowing for flexibility in the organization's skills profile. The position may require travel and working outside normal office hours. NATO is committed to diversity and inclusion, encouraging applications from all member nations and promoting equal access to employment opportunities. The organization offers various work-life policies, including teleworking and flexible working arrangements, subject to business requirements. NATO does not charge any fees related to the application or recruitment process.