Overview
The Officer, Accreditation Support is responsible for tracking the accreditation backlog and monitoring the status of unaccredited systems. The role contributes to the security accreditation process by coordinating audits, performing gap analysis, and supporting remediation planning.
Key Responsibilities
- Track the accreditation backlog and monitor the status of unaccredited systems.
- Coordinate and prioritise Security Audits (Type 3 and 4).
- Apply a risk-based approach to prioritisation.
- Perform gap analysis.
- Support remediation planning in accordance with NATO risk management frameworks.
- Provide strategic advisory support to senior stakeholders.
- Contribute to the development of policies, directives, and guidance documents related to enterprise security accreditation.
- Advise the section head on NATO Enterprise security accreditation processes and procedures.
- Assess and verify risks, and develop proposals to strengthen existing CIS security policies related to accreditation.
- Develop high-level strategic documents and advice to enhance enterprise security accreditation.
- Participate in project management boards as required.
- Maintain and contribute to enterprise-level cybersecurity programme execution.
- Identify, monitor, and proactively mitigate cybersecurity and accreditation-related risks.
- Coordinate and lead accreditation and risk management activities.
- Coordinate and develop mitigation and remediation actions.
- Establish and maintain a network of key experts across the NATO Enterprise.
- Develop close cooperation with the NATO operational community.
- Provide advisory support to senior leadership on enterprise cybersecurity risk posture.
- Draft background briefs, progress reports, presentations, and other materials for high-level meetings.
- Track accreditation status and support enterprise situational awareness.
- Provide advice on evolving security programmes across NATO nations, NATO civilian and military bodies, and non-NATO entities.
- Perform any other related duty as assigned.
Required Experience
At least 5 years of experience in the cyber operations field, including experience in leading remote teams effectively. Demonstrate strong experience in cybersecurity risk assessment, compliance frameworks (ISO 27001, NIST, GDPR), and security accreditation processes for both traditional and cloud-based solutions, including the aspects to be addressed during cybersecurity inspections. Have experience designing, implementing, and improving cybersecurity governance programmes, including ISMS, audit readiness, and enterprise security controls within traditional and cloud-based CIS capabilities and services. Experience providing executive-level reporting and cybersecurity briefings, and coordinating multi-stakeholder environments across large organisations. Experience developing, executing, coordinating, and improving accreditation processes for a large organisation.
Qualifications
A university degree relevant to the position.
