NATOIS-0043 ICT Security Architect (NS) BELGIUM - 22 Jul

The Information and Communication Technology Management (ICTM) Directorate has a portfolio of ICT-related projects with a diverse nature, some rather infrastructure related and others related to software acquisition and development. ICTM has a requirement for an expert in ICT security architecture for these projects.

Their efforts will focus on supporting the work of the Security Authority being the JISD/NOS, in particular with security architecture advice and guidance to ICT-related projects and with security auditing activities.

Division: International Staff (IS) - ICTM

Mission: ICTM provides support and services to the North Atlantic Council (NAC), its Committees, IS and IMS staff, and, when required, to Member and Partner Nation Delegations based in the HQ. The Directorate comprises of two pillars: Information Communication Technology (ICT) and Digital Information Management Services (DIMS).

Vision: ICTM is a recognised and trusted Directorate for the implementation of ICT-related projects for the IS. PRINCE2 has been adopted as methodology. In order to guarantee the (cyber-) security of systems that are being implemented, ICTM follows a security approval process, agreed by the Security Authority. As part of this process, security-related documentation needs to be submitted to a variety of stakeholders for review and approval.

Background: The incumbent will be embedded in the Security Architect Authority, being the Joint Intelligence and Security Division/NATO Office of Security (JISD/NOS), in order to enable the Security Approval/Accreditation Process of ICTM-led projects. In the past years ICTM and JISD/NOS have developed templates and examples of the documentation set that needs to be submitted as part of a Security Approval/Accreditation Process, as well as specific procedures applicable within the NHQ CIS Governance. These templates and procedures will be made available to the expert.

Objectives:

• Provide security architecture-related advice to NHQ ICT-related projects
• Contribute to the oversight of the Security Approval/Accreditation process of NHQ ICT-related projects and to CIS Security Risk Management activities
• Support the security auditing activities of JISD/NOS

• The candidate must have a currently active NATO SECRET security clearance
• Minimum 8 years of experience in ICT security-related functions;
• Proven, strong expertise in ICT security architecture and security Accreditation/Approval process;
• Experience in participating in ICT systems and applications implementations.
• Experience in both on-premise and cloud deployments.
• Experience with SIEM and UEBA technologies and tools.
• Ideally, the incumbent should also have experience in working: in an international organization or governmental environment; in a classified environment; within complex multi-stakeholders environments; with log analytics and user behavior monitoring and auditing.
• Technically oriented university degree (information management, electronic engineering, etc.) or equivalent completed advanced vocational training;
• Proven understanding and technical knowledge of the ICT infrastructure & security services (directory services, database, PKI, firewall, etc.), latest software technologies either on-premises or cloud-based;
• Good understanding of project management methodologies and tools (e.g. PRINCE2);
• Good knowledge of security architecture frameworks and methodologies (e.g. SABSA)
• Proven experience in organizing workshops and conducting meetings and presentations;
• Excellent drafting and communication skills;
• Desirable: knowledge and practice of NATO CIS security related directives.
• Desirable: national certification on cybersecurity risk management or security accreditation processes (e.g. Prestataires d’accompagnement et de conseil en sécurité des systèmes d’information (PACS), IT-Grundschutz, ENS)
• Desirable: formal training or certifications on SIEM or UEBA/UAM tools (e.g. Splunk, Everfox suite)
• Desirable: Artificial Intelligence (AI) related security architecture
• Language requirements: Possess the following minimum levels of NATO’s official languages (English): V (“Advanced”).