Cybersecurity Analyst (m/f/n)

Currently, for one of our Partners, we are looking for an experienced OOTS Cybersecurity Analyst (m/f/n) to support a project delivered for an EU public sector institution.

Requirements

• Education: EQF7 in IT, Information Technology, Information Security or a similar domain.

• Professional experience: at least 15 years.

• Experience with cross-border electronic identification and trust services, including eIDAS1, eIDAS2, eID Profile and EUDI framework: at least 5 years.

• Interoperability expertise in designing interoperable solutions for public administrations, including European institutions: at least 7 years.

• Experience with cybersecurity policies and guidelines for open source or Information Systems: at least 7 years.

• IT Risk Management experience, specifically with ITSRM2 methodology: at least 3 years.

• Experience with Once-Only principle supporting information systems, including implementation at any level of public administration: at least 2 years.

• Experience in advising on cybersecurity policies and regulations to ensure project compliance.

• Experience in conducting risk assessments based on ITSRM2 methodology.

• Experience in defining, implementing and updating security plans.

• Experience in supporting development teams throughout the Software Development Lifecycle (SDLC) to build and operate software securely.

• Experience with EC security standards and industry best practices, including OWASP Top 10.

• Experience in operationalising standards related to monitoring systems, security breaches and incidents.

• Experience in operationalising vulnerability management standards and processes.

• Experience in collaborating with IT and business teams to ensure compliance with security standards.

• Experience in conducting security training and awareness activities.

• Experience in leading security-related working groups or discussions with stakeholders.

• Experience in supporting electronic identification solutions based on eIDAS2 and EUDI framework.

• Experience in drafting technical specifications and providing security expertise for different technical options.

• Experience in supporting development and DevSecOps teams with security recommendations.

• TOGAF9 certification or standard knowledge.

• English: minimum B2 level, with strong written and oral communication skills.

• CV must be provided in Europass format.

Nice to have

• Experience with cloud security architectures and controls.

• Experience with OWASP.

• Experience with secure data exchange.

• Experience with electronic signatures.

• Experience with web services.

Offer

• Contract: B2B via SHIMI.

• Type of work: mostly remote / far-site work. Services must be performed from within the EU.

• On-site presence: occasional travel to Brussels may be required. For far-site delivery, the contracting authority may request on-site presence in Brussels with 7 days’ notice.

• Rate: 450–540 EUR/MD.