Profile required: Subject Matter Expert (SME) & Systems Analyst.

Contract on offer: 2-years initial contract (from 16/02/2026 to 15/02/2028). There are two renewals of 12 months each beyond this point. Total duration of the mission, 4 years.

Location: Hybrid in Luxembourg (80% on-site, 20 off-site). The Consultant will mainly work on-site at the ESM premises.

The successful applicant will report to the IT – Information Security and Control Senior Officer within the ESM IT and Facilities Management Division. The individual is required to follow ESM working hours, whether performing duties on-site or remotely, and all services are to be delivered on business days.

SERVICES DESCRIPTION

Within ESM’s IT, Information Security team, the Consultant is expected to deliver the following services to ESM (the “Services”):

·    - Provide security expertise for BAU activities, including incident management, user requests, threat analysis (spam/phishing), and vulnerability remediation follow-up.

·    - Conduct or support activities related to vulnerability management, penetration testing, secure code assessment, and threat intelligence.

·     - Lead BAU security initiatives, ensuring timely delivery and high-quality outcomes.

·    - Assist in business continuity, disaster recovery, and cybersecurity exercise preparation. - Coordinate with third-party security service providers on assigned topics.

·   - Advise the internal IT security team on security best practices for MS365 and Azure architecture, configuration, and operations.

·    - Monitor security sources to identify emerging threats and assess their relevance to ESM’s systems, processes, and users.

·     - Provide market analysis for cybersecurity tools, solutions, and emerging concepts.

·   - Support cybersecurity governance, including risk management, policies, compliance and alignment with standards such as NIST CSF or the Australian Essential Eight.

·     - Support security awareness activities.

DESIRED CONSULTANT

Technical skills:

·   - Bachelor’s degree (3+ years), Master’s, or Ph.D. in a relevant technical field (IT, cybersecurity, engineering); non-related degrees must be combined with significant ICT professional experience.

·     - Years of experience in IT or cybersecurity, depending on the submitted profile:

o SME, System analyst – Junior consultant: 0-3 years.

o SME, System analyst – Consultant: 3-7 years.

o SME, System analyst – Senior consultant: 7-10 years.

·    - Strong understanding of technical aspects of cyber security, and a good understanding of general security tools.

·    - The candidate has knowledge of Microsoft’s security ecosystem; a plus is recent experience with Microsoft’s security tools.

·      - Project management certifications (PM2, Prince2, PMI) are considered as an asset.

Soft skills:

·     - A “can do” attitude, proactiveness to take on relevant tasks, and ability to integrate well with various teams.

·      - Willingness to undertake tasks that require learning on the job.

· ·      - Ability to work independently on BAU security initiatives and assigned tasks.

·      - Capacity to organise meetings, agendas and minutes when required.

·      - Strong analytical skills for assessing threats, reviewing documentation, and analysing security reports.

·      - Excellent written and spoken English.