1. Key Responsibilities

• Conduct security risk assessments within the Digital Workplace context.

• Diagnose complex security and identity-related issues.

• Design, implement, and support solutions to mitigate identified security risks.

• Integrate various security technologies within a complex environment.

• Ensure endpoint security solutions are effectively integrated while having a comprehensive understanding of backend server and network infrastructure.

• Provide security studies and assessments associated with information system projects.

• Perform security assessments of information systems to ensure compliance with standards.

2. Level of Education

• A minimum educational qualification corresponding to Level 6 of the European Qualification Framework, typically a bachelor’s degree of at least three years.

3. Knowledge and Skills Required

• Technical Skills:

o In-depth knowledge of security standards applicable to European Commission information systems.

o Proficiency in IT Security Risk Management Methodology.

o Familiarity with IT Security Compliance Management.

o Experience in drafting security plans.

• Analytical and Problem-Solving Skills:

o Strong analytical skills with a proactive approach to problem-solving.

o Ability to prioritize tasks effectively and make informed decisions.

• Organizational Skills:

o Excellent organization, coordination, and planning skills.

o High drive and desire to empower ICT change and evolution.

• Communication Skills:

o Exceptional communication skills, adaptable to various audiences, including senior management and technology specialists.

4. Non-Technical Skills

• Ability to integrate into an international/multicultural environment with a rapid self-starting capability.

• Experience working collaboratively in teams on large, multicultural projects.

• Participation in multilingual meetings is essential.

• Strong team player with high integrity and discretion, as the role involves handling personal and confidential data.

• Proficient in English (C1 level is an advantage).

5. Specific Expertise

• Strong knowledge of IT Security Risk Management Methodology.

• Familiarity with IT Security Compliance Management practices.

• Experience drafting and implementing security plans.

6. Applicable Security Procedures

• During the performance of the tasks listed above, the external service provider may have access to sensitive or secured data or to secured areas. Therefore, the proposed candidate must be security clearable (EU-27 security clearance).

• All non-EU external service providers who may have access to either European Commission (EC) premises or EC networks are subject to security screening by the Commission’s security directorate (HR.DS) before the signature of the specific contract. This screening assesses risks associated with the Commission’s sensitive non-classified information.