ESO Information Security and Accreditation Officer

At ESA, the ESO Information Security and Accreditation Officer will work within the ESA Security Office (ESO), Directorate of Resources and Services.

Description

Information Security and Accreditation Officer, ESA Security Office (ESO), Directorate of Resources and Services.

Reporting functionally to the RNC-X Security Manager and hierarchically to the ESA Security Office, you will be responsible for the security activities related to the Directorate of Resilience, Navigation and Connectivity (RNC) Information Security Office, ensuring rigorous supervision of the correct management of information in terms of security, in accordance with the requirements of the ESA Security Directives. You will also be responsible for coordinating the ESO Security Assurance Team in the RNC Directorate.

The main ESO interface will be the ESO Security Accreditation Manager in Brussels.

Duties

As Accreditation Manager, your tasks and responsibilities will include:

• Ensuring proper coordination of the ESO RNC Security Assurance Team under the functional authority of the RNC-X Security Manager and in full coordination with ESO
• Coordinating with the RNC ESO Security Assurance Team the Directorate’s independent security risk analysis, including analysis and risk arising from RNC space programmes and RNC security-critical activities
• Supporting the establishment of RNC security assurance status and ensuring the Directorate’s proper PL1/PL2 security implementation
• Supporting the achievement of programme security accreditation objectives and milestones

As ISO (Information Security Office), your tasks and responsibilities, as defined in the ESA Security Directives, will include:

• Ensuring the security of the Directorate’s information
• Implementing information security on the basis of security risk assessment
• Defining and documenting the Directorate’s local policy on implementation of the assignment of the appropriate levels of protective marking to information in the form of the Security Marking Instruction
• Coordinating the development of a security marking equivalence matrix for the unclassified information managed within ESA space programmes and projects
• Identifying the security risk appetite for approval by the security risk owner and recommending the security risk response for approval by the security risk owner
• Specifying and documenting the LSE security operating procedures (SECOPs) for approval by the ESA SAA
• Implementing the LSE SECOPs
• Creating and providing the initial security briefing for newly appointed ESA staff and onsite contractor employees working within their Directorate
• Establishing, executing and maintaining a security awareness programme
• Providing reports and recommendations for security improvements and lessons learned to the security risk owner and the ESA Information Protection Policy Officer
• Reporting any security breaches, vulnerabilities or anomalies in accordance with the Security Directives and policy on the management of security incidents
• Taking any necessary security actions to contain security breaches in the event of a security incident concerning the LSE for which you are responsible
• Assisting the ESA Security Office on the conduct of security incident investigation
• Coordinating with the CIS Project/System Security Officer(s) within the Directorate to ensure the proper implementation of the information protection requirements for the CIS within the Directorate
• Participating in the Agency-wide network of ISOs, convening twice a year as the ESA Security Board, coordinated by ESO
• Participating as auditors or inspectors as part of the ESA Security Office audit or inspection of Directorates for which the ISO is not responsible
• Analysing, in close cooperation with the ITT Initiating Authority, the sensitivity of the information to be provided to bidders in the scope of an ITT

Technical competencies

• General knowledge of ESA and EU Space Programmes
• In-depth knowledge of ESA and EU accreditation processes
• In-depth knowledge of high-security assurance programmes
• In-depth knowledge of security risk management frameworks

Behavioural competencies

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

Education and professional experience

A master’s in engineering is required for this post together with 4 years of relevant professional experience. Alternatively, candidates with a bachelor’s degree, complemented by an additional four (4) years of relevant professional experience, can be considered.

Additional requirements

• Substantial security and system engineering experience
• Strong background in cyber security, policy and standards
• Excellent organisational and stakeholder management skills
• Strong judgement, communication skills and willingness to travel

Important Information

In principle, recruitment will be within the advertised grade band (A2-A4). However, if the selected candidate has less than four years of relevant professional experience following the completion of the master’s degree, the position may be filled at A1 level.

Applicants must be eligible to access information, technology and hardware subject to European or US export control and sanctions regulations and be eligible to acquire the security clearance required by their national security administrations.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

Nationality and Languages

Applications are only considered from nationals of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom, Canada, Cyprus, Latvia, Lithuania and Slovakia.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.