Cybersecurity Analyst (m/f/n)

Currently, for one of our Partners, we are looking for an experienced OOTS Cybersecurity Analyst (m/f/n) to support a project delivered for an EU public sector institution.

Requirements
• Education: EQF7 in IT, Information Technology, Information Security or a similar domain.
• Professional experience: at least 15 years.
• Experience with cross-border electronic identification and trust services, including eIDAS1, eIDAS2, eID Profile and EUDI framework: at least 5 years.
• Interoperability expertise in designing interoperable solutions for public administrations, including European institutions: at least 7 years.
• Experience with cybersecurity policies and guidelines for open source or Information Systems: at least 7 years.
• IT Risk Management experience, specifically with ITSRM2 methodology: at least 3 years.
• Experience with Once-Only principle supporting information systems, including implementation at any level of public administration: at least 2 years.
• Experience in advising on cybersecurity policies and regulations to ensure project compliance.
• Experience in conducting risk assessments based on ITSRM2 methodology.
• Experience in defining, implementing and updating security plans.
• Experience in supporting development teams throughout the Software Development Lifecycle (SDLC) to build and operate software securely.
• Experience with EC security standards and industry best practices, including OWASP Top 10.
• Experience in operationalising standards related to monitoring systems, security breaches and incidents.
• Experience in operationalising vulnerability management standards and processes.
• Experience in collaborating with IT and business teams to ensure compliance with security standards.
• Experience in conducting security training and awareness activities.
• Experience in leading security-related working groups or discussions with stakeholders.
• Experience in supporting electronic identification solutions based on eIDAS2 and EUDI framework.
• Experience in drafting technical specifications and providing security expertise for different technical options.
• Experience in supporting development and DevSecOps teams with security recommendations.
• TOGAF9 certification or standard knowledge.
• English: minimum B2 level, with strong written and oral communication skills.
• CV must be provided in Europass format.
Nice to have
• Experience with cloud security architectures and controls.
• Experience with OWASP.
• Experience with secure data exchange.
• Experience with electronic signatures.
• Experience with web services.

Offer
• Contract: B2B via SHIMI.
• Type of work: mostly remote / far-site work. Services must be performed from within the EU.
• On-site presence: occasional travel to Brussels may be required. For far-site delivery, the contracting authority may request on-site presence in Brussels with 7 days’ notice.
• Rate: 450–540 EUR/MD.