NATO Staff Officer Cyber Security/Incident Response Manager

Job Posting Organization:
The job posting organization is NATO, which stands for the North Atlantic Treaty Organization. Established in 1949, NATO is a military alliance of 31 member countries from North America and Europe. Its mission is to ensure the collective defense and security" style="border-bottom: 1px dotted #007bff !important;">security of its member states, promoting peace and stability in the region. NATO operates through various commands and agencies, including the Allied Command Transformation (ACT), which focuses on warfare development and enhancing NATO's military capabilities. The organization employs thousands of personnel across its member states and is involved in numerous international operations and missions.

Job Overview:
The NATO Staff Officer Cyber Security/Incident Response Manager position is a critical role within the ACT's Cybersecurity and Incident Response framework. This position is responsible for implementing the Chief Information Security Officer's (CISO) role and responsibilities at HQ SACT and its subordinate commands. The officer will engage in real-time cyber defense incident handling, which includes tasks such as forensic collections, intrusion correlation, threat analysis, and system remediation. The role requires active monitoring of networks and systems for cyber incidents, conducting risk analysis, and performing security reviews to identify potential threats. The officer will also be involved in developing and preparing cyber defense incident analysis and reporting, as well as creating and maintaining prevention and incident response plans. This position demands a proactive approach to cybersecurity, ensuring that the HQ SACT Cyber Defense Posture Level is maintained and that staff are educated on best practices for cyber hygiene. The officer will work closely with various stakeholders, including NATO HQ and ACO, to develop and maintain NATO Cyber Security policies, contributing to the overall security and resilience of NATO's operations.

Duties and Responsibilities:
The duties and responsibilities of the NATO Staff Officer Cyber Security/Incident Response Manager include:

• Contributing to the implementation of the CISO's role within HQ SACT and subordinate commands.
• Performing real-time cyber defense incident handling tasks, including forensic collections and threat analysis.
• Conducting security triage to identify and analyze cyber incidents and threats.
• Actively monitoring networks and systems for cyber incidents.
• Conducting risk analysis and security reviews of system logs.
• Applying network scanners and vulnerability assessment tools.
• Collecting and analyzing data to identify cybersecurity flaws and vulnerabilities.
• Developing and preparing cyber defense incident analysis and reporting.
• Defining and maintaining tool sets and procedures for incident response. 1
• Developing, implementing, and evaluating prevention and incident response plans. 1
• Conducting research and development on cybersecurity incidents and mitigations. 1
• Creating training materials and delivering relevant training. 1
• Contributing to the Security Accreditation Process in collaboration with the ACT Office of Security. 1
• Designing, deploying, and maintaining the HQ SACT Cyber protection program. 1
• Ensuring information resources are protected while remaining accessible. 1
• Providing guidance on Cyber evolution across HQ SACT. 1
• Increasing staff awareness of best practices for Cyber hygiene. 1
• Liaising with HQ SACT Capability Development Directorate for technology development. 1
• Assisting with all aspects of the CDI Branch as required by the Section Head.

Required Qualifications:
The required qualifications for the NATO Staff Officer Cyber Security/Incident Response Manager position include:

• A University Degree in computer security, information technology, computer science, or a related discipline, with at least 2 years of function-related experience; or higher secondary education with advanced vocational training leading to a professional qualification and 4 years of post-related experience.
• A minimum of five years of practical experience in Cyber Security and risk management within a large military or civilian organization.
• At least two years of experience in managing contracted staff.
• Experience in managing IT and Cyber-related projects and associated risks.
• A good working knowledge of organizational change management processes and stakeholder management.

Educational Background:
The educational background required for this position includes a University Degree in computer security, information technology, computer science, or a related discipline. Alternatively, candidates with higher secondary education and completed advanced vocational training leading to a professional qualification will also be considered, provided they have the requisite experience. This educational foundation is essential for understanding the complexities of cybersecurity and incident response management.

Experience:
Candidates for the NATO Staff Officer Cyber Security/Incident Response Manager position should possess a minimum of five years of practical experience in Cyber Security and risk management. This experience should ideally be gained within a large military or civilian organization, demonstrating the ability to handle complex cybersecurity challenges. Additionally, candidates should have at least two years of experience managing contracted staff and overseeing IT and Cyber-related projects, which is crucial for ensuring effective project management and risk mitigation.

Languages:
The mandatory language requirement for this position is English, with a proficiency level of SLP 3333, which encompasses listening, speaking, reading, and writing. This level of proficiency is essential for effective communication within the organization and with external stakeholders. While English is the primary language, candidates with additional language skills may have an advantage, particularly if they are familiar with languages spoken in NATO member countries.

Additional Notes:
This position is linked to a specific NATO project and is for a limited duration of 2 years. Serving NATO International Civilian staff will be offered a contract in accordance with NATO Civilian Personnel Regulations, while newly recruited staff will receive a three-year definite duration contract. Candidates should be aware that applications must be completed in English, and any use of generative AI tools in application preparation may lead to immediate rejection. NATO is committed to diversity and inclusion, encouraging applications from all member nations and particularly welcoming women to apply. The vacancy will close on 26 October 2026 at 18:59hrs (EDT)/11:59hrs (CET).