Cyber Security Expert

Job Posting Organization:
EUROCONTROL is an intergovernmental organization established in 1960, dedicated to supporting European aviation. With a mission to develop a seamless, pan-European air traffic management system, EUROCONTROL operates across 41 member states and employs over 1,800 staff. The organization focuses on enhancing safety, efficiency, and environmental sustainability in air traffic management, and it plays a crucial role in coordinating air traffic control and providing various services to its member states.

Job Overview:
The Cyber security" style="border-bottom: 1px dotted #007bff !important;">Security Expert position at EUROCONTROL is pivotal in ensuring the security of mission-critical networks, systems, and services. The role involves providing technical expertise and guidance in defining security requirements, developing and executing security-related policies, and contributing to the overall security management framework. The expert will be responsible for solving cyber security incidents, participating in crisis management, and ensuring compliance with internal policies and external regulations. The position also requires collaboration with internal teams and external partners to enhance cyber security measures and develop training programs to raise security awareness within the organization. The expert will monitor the aviation cyber threat landscape and conduct risk assessments to identify vulnerabilities and recommend corrective actions. This role is essential for maintaining the integrity and security of EUROCONTROL's operations.

Duties and Responsibilities:
The Cyber Security Expert will have a comprehensive set of responsibilities, including:

• Providing technical expertise and guidance on security requirements and policies.
• Developing methods and tools for a harmonized approach to security management.
• Solving cyber security incidents and participating in crisis management activities.
• Auditing and monitoring security measures and service providers for compliance.
• Collaborating with internal teams and advising management on cyber security issues.
• Conducting security risk assessments and analyzing vulnerabilities.
• Monitoring and analyzing the aviation cyber threat landscape.
• Developing training programs and delivering courses on cyber security.
• Producing technical documents and contributing to tender specifications. 1
• Staying updated on technological developments and sharing knowledge within the organization. 1
• Carrying out any other tasks in line with the job's main purpose.

Required Qualifications:
Candidates must have completed relevant third-level studies in IT and/or security studies, meeting European Qualifications Framework (EQF) Level 6, followed by at least 4 years of relevant professional experience, or EQF Level 7 with at least 3 years of experience. Candidates should have experience in conducting cyber security risk assessments, analyzing technical systems from a security perspective, and knowledge of governance and compliance frameworks such as ISO 27001 and NIST CSF. Hands-on expertise in cyber security domains like penetration testing or incident response is essential. Strong technical drafting skills in English and the ability to work in a multinational environment are also required.

Educational Background:
The educational background required for this position includes a degree in IT or security studies that meets the European Qualifications Framework (EQF) Level 6 or Level

• This educational foundation is crucial for understanding the complexities of cyber security and the regulatory frameworks that govern it.

Experience:
The position requires a minimum of 3 to 4 years of relevant professional experience in cyber security, depending on the level of education. Candidates should have practical experience in conducting risk assessments, analyzing vulnerabilities, and implementing security measures. Experience in a multinational and multicultural environment is also beneficial, as the role involves collaboration with diverse teams.

Languages:
Proficiency in English at level C1 is mandatory for this position, as it is the working language of the Agency. Knowledge of French is also beneficial but not mandatory. Candidates must demonstrate their language skills in accordance with the Common European Framework of References for languages (CEFR).

Additional Notes:
The position is a full-time role with a duration of 5 years, subject to renewal or conversion under specific conditions. The selected candidate will be required to complete a probationary period of nine months. The appointment may be renewed several times, but the total duration, including all renewals, may not exceed nine years. The role operates under a hybrid working model, allowing for a combination of onsite presence and teleworking, with specific guidelines on teleworking days. Applications are accepted only from nationals of EUROCONTROL Member States, and candidates must provide documentary evidence of their qualifications if selected.