The Enterprise Cyber Risk Assessment Officer supports NATO’s enterprise-wide governance of cyber, cloud, artificial intelligence (AI), and ICT risks through the conduct of system-, service-, and enterprise-level risk assessments and the delivery of both qualitative and quantitative risk analysis.
- Conduct and support CIS and Enterprise-level cyber risk assessments across NATO ICT, cloud, digital, and AI-enabled capabilities.
- Perform both qualitative and quantitative risk analysis to identify, assess, prioritize, and communicate risks affecting NATO operations, mission objectives, and Mission Vital Infrastructure (MVI).
- Develop risk assessment methodologies, evaluate risk scenarios, analyse risk interdependencies, and support risk-informed decision making.
- Support the development, implementation, and continuous improvement of the NATO Enterprise Risk Management (ERM) Framework.
- Ensure the integration of cyber, ICT, cloud, artificial intelligence (AI), vulnerability, threat, and operational risk information into enterprise risk management activities.
- University degree in a relevant technical field such as computer science, systems science, cyber security, or an equivalent technical qualification/experience
- Nice to have: Knowledge of NATO structures and processes
- Nice to have: Knowledge of NATO Security Policy
- Nice to have: Knowledge of NATO CIS Security Accreditation processes
- Nice to have: Professional certifications in cyber security, risk management, or project management