COSMOTE Global Solutions NV
is seeking a skilled Cybersecurity Legal and Privacy Advisor to join our dynamic ICT team.
As part of the OTE Group of Companies, we specialize in delivering cutting-edge ICT solutions and services spanning Cloud Services, Data Centre operations, Networking, Cybersecurity, Business Intelligence, Big Data, and more.
Controlli attentamente tutta la documentazione richiesta per la candidatura prima di fare clic sul pulsante apposito in fondo a questa descrizione.
In this role, you will be responsible for defining and assessing cybersecurity, compliance and privacy requirements across JRC information-system and digital services.
You will work closely with System Owners, System Managers, IT service providers and relevant Commission services to support risk assessments, security planning, secure architecture design and implementation activities.
Your responsibilities will include developing security and compliance templates and baselines, coordinating remediation activities, tracking non-conformities and corrective actions, reviewing risk assessments and mitigation measures, and reporting compliance status and gaps to the JRC LISO.
You will also ensure consistency in the application of security, legal and privacy requirements across systems and services, supporting the effective implementation and continuous improvement of the JRC security and compliance framework.
Key Responsibilities
Definition of compliance requirements for JRC information-system controls, in close collaboration with the System owners and System managers
Preparation of templates covering security processes,



controls and technical solutions across all JRC digital services
Support System Owners and IT service providers with the elaboration of their:
Business Impact Assessment and Scope of Security
Risk Assessment exercise
Security Plan
Secure System Architecture Design
Implementation Plan
Assistance with the management of remediation activities, including tracking of non-conformities, assignment of corrective actions to system owners and verification of their closure within agreed time-frames
Development and maintenance of security baselines for the JRC systems and services
Coordination and review of risk-assessments, ensuring that identified risks are evaluated against the defined compliance criteria and that mitigation measures are documented
Reporting of compliance status to the JRC LISO, highlighting gaps and progress on remediation
Interaction with system owners and IT service providers and other relevant Commission services to ensure consistency
Requirements
2 years of post-secondary education or higher
Good knowledge of ISO***** family of standards, the EC Security Policies, the European Commission Risk-management methodology and related risk-assessment techniques
Good experience in the security domain, including the development and review of security methodologies,



Business Impact Assessments, Risk Assessments and Secure System Architecture Design
Ability to review draft Security Plans and related security-plan material efficiently and fast
Ability to give business and technical presentations to system owners, IT service providers
Ability to apply high quality standards in documentation, template creation and guidance material for security planning
Ability to cope with fast changing technologies used in cloud services, AI-driven applications and other digital services xysqume within the JRC environment
Very good communication skills with technical and non-technical audiences to facilitate multilingual, multicultural meetings and stakeholder engagement
Analysis and problem solving skills
Capability to write clear and structured technical documents
Ability to participate in technical meetings and good communication skills
Relevant certifications in Governance, Risk and Compliance or Risk Management and Audit or broad Cybersecurity are an advantageous asset (CGRC, CRISC, CISA, CISSP, CISM, etc..)
Ability to integrate in an international/multicultural environment, rapid self-starting capability and experience in working in team;
Ability to participate in multilingual meetings;
Ability to work in multi-cultural environment, on multiple large projects;
Ability to establish trusting relationships with counterparts in partnering organizations;
Excellent team player
Ability to understand, speak and write English C1 will be an advantage;
High degree of discretion and integrity
#J-*****-Ljbffr

📌 Cybersecurity Legal And Privacy Advisor (Bardi)
🏢 Cosmote Global Solutions
📍 Bardi