[5813] Cyber Security Engineer (Security Accreditation)

Start date: April 2026
Clearance: NATO Secret or equivalent
Location: The Hague, Netherlands

Requirements:
• Relevant certifications, such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP)
• Security Accreditation of major CIS acquisition and/or development projects for a large organization
• Security risk assessment methodologies and tools
• Planning, design and implementation of security components of major CIS
• Knowledge of NATO Security Policy and supporting directives

Duties:
• Contributes to the development of solution architectures in specific business, infrastructure or functional areas by identification of applicable NATO security directives
• Provides guidance on the application and operation of elementary physical, procedural and technical security controls
• Explains the purpose of security controls and performs security risk assessments for communication and information systems
• Identifies risks that arise from potential technical solution architectures
• Suggests alternate solutions or countermeasures, which can mitigate identified risks
• Defines and manages scoping, requirements definition and prioritisation activities related to security accreditation
• Follows agreed standards and applies appropriate techniques to elicit and document detailed requirements related to security accreditation
• Works with stakeholders to prioritise requirements and resolve conflicts
• Provide security accreditation advice and guidance to NCI Agency Project, System Managers during whole life cycle of NATO CIS, including providing inputs to Project Proposals and Invitations for Bid
• Conduct Security Risk Assessment in support of security accreditation of NATO CIS, in particular; identify level of threats and vulnerabilities for all assets comprising NATO CIS, derive residual risks and provide risk management recommendations
• Identify, plan, request and manage development of required documents for accreditation (CIS Description, Security Accreditation Plan, Security Risk Assessment Report, Security Requirement Statements, Security Operating Procedures, and Security Test and Verification Plan)
• Witness security testing (in accordance with STVP) and coordinate remediation plan with the relevant SAA
• Build and sustain effective communications with different stakeholders specifically the Security Accreditation Boards, NATO Security Accreditation Authorities, NATO CIS Operational Authorities and NCI Agency organization units supporting security accreditation process
• Represent the Agency on security accreditation matters
• Stay abreast of technological developments relevant to the area of work
• Perform any other duties as may be required