Spektrum have a wide range of exciting opportunities in several global locations. We are always looking to add great new talent

to our team and look forward to hearing from you.

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a

wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales,

delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

---------------------------------------------------------------------------------------------------------------------------------

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and

information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is

headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information

systems against cyber threats.

Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute

operations.

Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications

between NATO forces.

Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats

to its communication networks.

Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications,

and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information

technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider.

It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult

together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high

performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International

Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI

Agency workforce and make up approximately 15 percent of the total workforce.

Role ID –C004920

Role Background

The Cyber Security Officer is responsible for designing, implementing, and

maintaining cyber security solutions that protect the organization's information

systems and infrastructure. The role supports secure system development, risk

management, security operations, compliance activities, and incident response while

leading a small Cyber Security and COMSEC team. The position works closely with

stakeholders and the NATO Cyber Security Centre (NCSC) to ensure systems comply

with NATO security policies and operational requirements.

Role Duties and Responsibilities

 Design, develop, implement, test, and maintain secure information systems

throughout the system development lifecycle.

 Develop cyber security solutions that meet operational and business requirements.

 Work with stakeholders to translate business and functional requirements into secure

technical solutions.

 Apply and maintain security controls in accordance with organizational policies and

local risk assessments.

 Perform risk assessments for information systems and identify security risks.

 Recommend security improvements and mitigation strategies for identified risks.

 Define and maintain secure system configurations that comply with approved

architectures.

 Support the investigation of cyber security incidents, suspected attacks, and security

breaches.

 Lead and supervise a team of 3–4 Cyber Security and COMSEC personnel.

 Manage Cyber Security operations as the Cyber Security Section Head.

 Coordinate cyber security activities with the NATO Cyber Security Centre (NCSC).

 Oversee boundary protection, data loss prevention, endpoint protection, and

enterprise anti-malware solutions.

 Plan, schedule, coordinate, and facilitate cyber security audits and inspections.

 Manage corrective actions resulting from security audits and inspections.

 Supervise security monitoring, testing, evaluation, and accreditation activities for

information systems.

 Plan and implement cyber security services to support Agency business units.

 Deputize for senior staff when required.

 Perform additional duties as assigned.

 Support physical tasks, including lifting equipment up to 25 lbs when required.

Essential Skills, Experience and Certifications

 Strong knowledge of cyber security principles, system security, and security

architecture.

 Windows Server security hardening and compliance management.

 Network security, firewall technologies, VPNs, intrusion detection, and forensic

tools.

 Security governance, risk management, and vulnerability management.

 Security incident response and investigation.

 Data Loss Prevention (DLP) and endpoint security management.

 Security audit coordination and compliance management.

 Server, network, and storage virtualization technologies.

 Public Key Infrastructure (PKI).

 Cloud technology fundamentals.

 Strong analytical and problem-solving skills.

 Ability to work independently and manage multiple priorities.

 Excellent written and verbal communication skills.

 Positive customer-focused attitude with strong interpersonal skills.

 Ability to perform effectively in high-pressure environments.

 Familiarity with ITIL service management processes.

 Basic understanding of Disaster Recovery (DR) and Business Continuity (BC).

Experience

 Minimum 5 years' experience in Windows Server security hardening.

 Minimum 3 years' experience with Trellix ePolicy Orchestrator and Trellix Endpoint

Security (or equivalent endpoint security platform).

 Minimum 2 years' experience in:

o System security

o Security architecture

o Network security engineering

o Security governance

o Risk management

 Experience with:

o Windows Server 2016, 2019 and 2022

o Windows 10 and Windows 11

o Palo Alto Enterprise Firewalls

o Trellix/McAfee Endpoint Security solutions

o Vulnerability scanning tools such as Nessus

o VMware vSphere, ESX, NSX and vSAN

o Wireless LAN security

o Mobile endpoint security

o Supporting NATO Enterprise CIS environments

 Previous experience working in an international military and civilian environment

is desirable.

Education

 Bachelor's degree in Cyber Security, Information Technology, Computer Science,

or a related discipline.

 At least 6 years of extensive and progressive experience in a closely related cyber

security role.

Certifications

Mandatory

 CISM or CISSP

Preferred

 CGRC/CAP, CASP+, Cloud+, PenTest+, Security+, GSEC, CISA, CISSO, CPTE,

CySA+, FITSP-A, GCSA, CISSP-ISSEP, GSLC, GSNA, CEH, GIAC certifications

 ITIL Foundation (v3 or v4)

 NATO COMPUSEC Practitioner Level 1 (0731)

 NATO COMPUSEC Practitioner Level 2 (0732)

 NATO CIS Security Officer (0280)

Language

 English Level B2–C1 (NATO STANAG 6001 Level 3333).

Working Location

 Location: Ramstein, Germany

 Work Arrangement: Full-time, primarily on-site

 Remote work may be permitted only with prior Agency approval and project

requirements.

 Some physical duties may be required, including lifting up to 25 lbs.

Working Policy

 Employment Type: Full-time Contract

 Contract Duration: 30 August 2026 – 30 December 2026

 Weekly Working Hours: 38 hours per week

 Working Days: Monday to Friday

 Daily unpaid lunch break in accordance with local regulations.

 Contractor must maintain valid personal liability and comprehensive insurance.

 Must be available during agreed working hours.

 Must comply with all Agency security, information assurance, and data protection

policies.

 Reliable communication and secure access to Agency systems are required

throughout the assignment.

Travel

 Some travel to other NATO sites may be required

Security Clearance

 Valid NATO Cosmic Top Secret (CTS-A / COSMIC TOP SECRET ATOMAL)

security clearance at the time of submission and throughout the contract.

---------------------------------------------------------------------------------------------------------------------------------

We never know what new opportunities might be just over the horizon. If this opportunity isn't for you, please feel free to send

us your resume anyway and be the first to know if something suitable for your skills and experience comes up.

Roll

Cyber Security Officer

Kategori

NATO Communications and Information Agency (NCIA)

Plats

Ramstein, Tyskland

Publicerad

17 juli

Sista ansökningsdag

21 augusti

Källa

Arbetsgivarens hemsida

Taggar för det här jobbet

NATO Communications and Information Agency (NCIA)

Liknande jobb

Information Security Officer - Geely Europe Innovation and Collaboration AB

Geely Europe Innovation and Collaboration AB•Göteborg

Explore the exciting world of Geely Holding Group. Over the past three decades of development, Geely Holding Group has transformed into a global innovative technology group engaged in the design, R&D, production, sales, and service of vehicles, powertrains, and key components, as well as mobility services, digital technology, financial services, and education. Developing cutting-edge technologies in everything from new energy to low orbit satellites as we lay the foundation for a future multi-dimensional mobility ecosystem. Headquartered in Hangzhou, Geely Holding today has a number of invested companies including Lynk & Co, Zeekr, Geely Auto, Volvo Cars, Polestar, Lotus, London Electric Vehicle Company, Farizon Auto, and much more. In Europe, Geely Holding is represented by Geely Sweden Holdings located in Gothenburg.   Geely Europe Innovation & Collaboration AB is a shared competence and service center for Geely companies in Sweden and Europe. Providing expertise and support in staff functions such as IT, HR, Legal, Finance, Tax, Real Estate Development and Facility Management. We are currently seeking a Information Security Officer (ISO) to join our IT team. This is an opportunity to join a unique professional journey that combines the best of two worlds, being part of a specialized organization in a larger multicultural context. YOUR NEW ADVENTURE AWAITS! The primary objectives and key responsibilities of this role is to: · Develop, implement, and maintain the ISMS aligned with ISO 27001. · Define and maintain information security policies, standards, procedures, and guidelines. · Ensure security governance processes are integrated into IT and business operations. · Monitor compliance with internal security requirements and external regulations. · Facilitate information security risk assessments across business and IT functions. · Maintain the enterprise information security risk register. · Identify, evaluate, and mitigate cybersecurity and information security risks. · Track risk treatment plans and ensure timely implementation of controls. · Ensure compliance with ISO 27001, NIS2, GDPR, customer and contractual requirements. · Support internal and external audits. · Coordinate corrective and preventive actions arising from audits. · Monitor security posture through metrics and reporting. · Review vulnerability assessments and remediation activities. · Support incident response processes and post-incident reviews. · Develop and manage security awareness programs. · Conduct employee training on information security and data protection. · Assess supplier and vendor security risks. · Support vendor security reviews and due diligence assessments. · Support BCM and Disaster Recovery planning. · Participate in resilience testing and recovery exercises. EXPERIENCE AND SKILLS REQUIRED · Bachelor’s degree in Information Technology, Cyber Security, Information Systems, or related field. · 3-5+ years of experience in Information Security, Risk Management, IT Governance, or Compliance. · Experience implementing or maintaining ISO 27001. · Experience with cloud environments and audit/compliance activities. Prefered qualifications are · ISO 27001 Lead Implementer or Lead Auditor · CISSP · CISM · CRISC · Security+ or equivalent Technical Knowledge · ISO 27001/27002 · NIS2 · GDPR · Risk Management Frameworks · IAM · Cloud Security · ITIL 4 and Business Continuity & Disaster Recovery Key Competencies for you to succeed in this role would be · Stakeholder management · Risk-based decision making · Problem solving · High integrity and professionalism · Strong documentation skills Geely Europe Innovation and Collaboration AB is situated within Geely's state-of-the-art innovation campus, Uni3 by Geely, at Lindholmen in Gothenburg. Here, you will enjoy working in an organization where a collaborative and dynamic work environment foster creativity and efficiency. At Geely Europe Innovation and Collaboration AB we value individuals who bring an analytical mindset, self-motivation, and strong confidence to our dynamic and adaptable team. Whether working independently or collaboratively, your self-motivation, strong customer service skills, and proactive approach will be highly valued and appreciated. Building and nurturing strong business relationships is a fundamental aspect of our company culture. Embrace the absence of fixed structures and contribute to our vibrant and flexible setting, where your ideas and contributions truly matter. WHERE EAST MEETS WEST We are proud of our truly multicultural environment. Our organization brings together colleagues from many different nationalities and professional backgrounds. We believe diversity strengthens our decisions, creativity, and performance. At Geely, traditions and cultures meet — from Chinese New Year celebrations to Swedish Lucia — creating a workplace where global perspectives and local values coexist naturally. Apply now! Become part of a team where diversity flourishes, innovation thrives, and exciting possibilities await. Apply today and join a journey of cultural exploration and personal fulfillment! If you have any question please reach out to [manager name], hiring manager for this position, at [manager email]

Sista ansökan: 7 sep.Publicerad: 6 juli

ITCyber Security

Cluster north digital / cyber security officer - m/f

Securitas•Stockholm

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations. All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation. Your Role – Cluster Digital Security Officer (Cluster North) As a Cluster Digital Security Officer, you will support the technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division-level security priorities. This is a hands-on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi-country and multi-layer (Cluster–Division–Group) environment. ---------------------------------------------------------------------------------------------------------------------------------- Key Responsibilities Security Coordination & Team Collaboration (Cluster & Division) * Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives * Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications * Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution * Contribute actively to the Digital Security community, including sharing practices related to application and platform security * Provide regular, transparent, and data-driven reporting on risk posture, control effectiveness, and remediation progress Technical Security Oversight (Infrastructure & Applications) * Monitor and assess the security posture of platforms, infrastructure, and applications (on-prem and cloud) * Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security * Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10) * Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications * Track and assess third-party and supplier risks, including risks related to applications and integrations Risk, Compliance & Assurance * Identify and track gaps against security policies, standards, and mandates, including application security requirements * Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments * Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams Securitas Alarm Monitoring Centers (SOC) Security In addition to Cluster responsibilities, you will contribute to Division-level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas. This includes: * Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications * Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access) * Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows * Supporting incident detection, response readiness, and recovery capabilities for SOC-related platforms and applications * Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments ---------------------------------------------------------------------------------------------------------------------------------- Ideal Candidate Profile We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills. Certifications (mandatory) * CISSP or CISM or equivalent Experience & Knowledge * 5–7 years of experience in Cyber Security, Information Security or Application Security * Minimum of 2 years of experience in IT operations * Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security) * Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations * Good understanding of ISO 27001 standard * Experience with risk management, audits, or compliance activities * Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications Technical & Analytical Skills * Ability to assess security posture across infrastructure and applications and identify control gaps * Comfortable working with security metrics, reports, and risk data * Understanding of incident detection and response processes, including those impacting applications * Ability to translate security requirements into practical and implementable actions across infrastructure and application teams

Sista ansökan: 7 sep.Publicerad: 30 apr.

Securitas ITCyber Security

Cluster north digital / cyber security officer - m/f

Securitas Intelligent Services AB•Stockholm

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations. All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation. Your Role – Cluster Digital Security Officer (Cluster North) As a Cluster Digital Security Officer, you will support the technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division-level security priorities. This is a hands-on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi-country and multi-layer (Cluster–Division–Group) environment. Key Responsibilities Security Coordination & Team Collaboration (Cluster & Division) Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution Contribute actively to the Digital Security community, including sharing practices related to application and platform security Provide regular, transparent, and data-driven reporting on risk posture, control effectiveness, and remediation progress Technical Security Oversight (Infrastructure & Applications) Monitor and assess the security posture of platforms, infrastructure, and applications (on-prem and cloud) Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10) Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications Track and assess third-party and supplier risks, including risks related to applications and integrations Risk, Compliance & Assurance Identify and track gaps against security policies, standards, and mandates, including application security requirements Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams Securitas Alarm Monitoring Centers (SOC) Security In addition to Cluster responsibilities, you will contribute to Division-level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas. This includes: Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access) Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows Supporting incident detection, response readiness, and recovery capabilities for SOC-related platforms and applications Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments Ideal Candidate Profile We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills. Certifications (mandatory) CISSP or CISM or equivalent Experience & Knowledge 5–7 years of experience in Cyber Security, Information Security or Application Security Minimum of 2 years of experience in IT operations Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security) Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations Good understanding of ISO 27001 standard Experience with risk management, audits, or compliance activities Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications Technical & Analytical Skills Ability to assess security posture across infrastructure and applications and identify control gaps Comfortable working with security metrics, reports, and risk data Understanding of incident detection and response processes, including those impacting applications Ability to translate security requirements into practical and implementable actions across infrastructure and application teams

Sista ansökan: 21 dec.Publicerad: 24 juni

IT-tekniker/DatateknikerCyber Security