Definition of compliance requirements for JRC information‑system controls, in close collaboration with the System owners and System managersPreparation of templates covering security processes, controls and technical solutions across all JRC digital servicesSupport System Owners and IT service providers with the elaboration of their:Business Impact Assessment and Scope of SecurityRisk Assessment exerciseSecurity PlanSecure System Architecture DesignImplementation PlanAssistance with the management of remediation activities, including tracking of non‑conformities, assignment of corrective actions to system owners and verification of their closure within agreed time‑framesDevelopment and maintenance of security baselines for the JRC systems and servicesCoordination and review of risk‑assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documentedReporting of compliance status to the JRC LISO, highlighting gaps and progress on remediationInteraction with system owners and IT service providers and other relevant Commission services to ensure consistent inRequirements:2 years of post-secondary education or higherGood knowledge of ISO27000 family of standards, the EC Security Policies, the EC Risk‑management methodology and related risk‑assessment techniquesGood experience in the security domain, including the development and review of security methodologies, Business Impact Assessments,



Risk Assessments and Secure System Architecture DesignAbility to review draft Security Plans and related security‑plan material efficiently and fastAbility to give business and technical presentations to system owners, IT service providersAbility to apply high quality standards in documentation, template creation and guidance material for security planningAbility to cope with fast changing technologies used in cloud services, AI‑driven applications and other digital services within the JRC environmentVery good communication skills with technical and non-technical audiences to facilitate multilingual, multicultural meetings and stakeholder engagementAnalysis and problem solving skillsCapability to write clear and structured technical documentsAbility to participate in technical meetings and good communication skillsRelevant certifications in Governance, Risk and Compliance or Risk Management and Audit or broad Cybersecurity are an advantageous asset (CGRC, CRISC, CISA, CISSP, CISM, etc..)Ability to integrate in an international/multicultural environment, rapid self-starting capability and experience in working in team;Ability to participate in multilingual meetings;Ability to work in multi-cultural environment, on multiple large projects;Ability to establish trusting relationships with counterparts in partnering organizations;Excellent team playerAbility to understand, speak and write English C1 will be an advantage;High degree of discretion and integrity.
#J-18808-Ljbffr

📌 Cybersecurity leagal & privacy advisor (Sant'Agostino)
🏢 Appsierra Group
📍 Sant'Agostino