Cyber Security Governance Specialist at COSMOTE… · Brussels

Telekom HBS, part of the Telekom Group, is an ICT Systems Integrator offering a comprehensive suite of ICT Solutions and Services.

Telekom HBS, specializes in delivering ICT Services in areas such as Cloud, Data Centre operations, Networking, Cybersecurity, BI and Data Warehouse, Big Data, Service Desk, Proactive Monitoring, Operations and Support, Service Management, Project and Programme Management, and Professional Services. We are seeking an Cyber Security Governance Specialist to join our team and be responsible for the following tasks:

Responsibilities:

• Support the GAIA Programme team in the context of cybersecurity governance, risk management and compliance;

• Define, maintain and monitor the cybersecurity governance framework applicable to the GAIA landscape, including the related registry of security artefacts;

• Analyse, draft and maintain the necessary cybersecurity governance artefacts, including risk assessments, compliance assessments, IT security plans, security exceptions, waivers and follow--up actions;

• Monitor and assess security--related requirements, risks and obligations relevant to generative AI services and platforms, and contribute to their consistent implementation across the GAIA Programme;

• Oversee, monitor and report on security governance and compliance aspects of vendor and contractor implementation activities in the GAIA Programme;

• Establish and maintain governance mechanisms to ensure the consistent application, monitoring and follow--up of security controls across the GAIA application landscape;

• Prepare security governance reporting, dashboards, status updates and briefing material for management and relevant stakeholders;

• Support the preparation and follow--up of audits, reviews and compliance checks, including the collection of evidence and tracking of remediation actions;

• Contribute cybersecurity governance advice to Commission projects that make use of the GAIA horizontal solutions.

• Bachelor's Degree at a relevant field.

• Very good knowledge of cybersecurity governance and compliance requirements in the context of the European Institutions in general, and DIGIT in particular;

• Good knowledge of cybersecurity governance, risk management and internal control methodologies;

• Good knowledge of the preparation and maintenance of security governance artefacts, such as risk registers, compliance assessments, IT security plans, control catalogues, exception registers and remediation follow--up;

• Ability to analyse and assess security requirements, risks and controls in the context of emerging technologies such as the generative AI domain;

• Ability to establish and maintain a high--level governance view of the cybersecurity landscape across multiple services and projects;

• Ability to monitor, track and report on risks, compliance actions, remediation measures and security decisions;

• Strong analytical, organisational and problem--solving skills;

• Capability to write clear, structured and concise cybersecurity governance documentation;

• Good communication skills with both technical and non--technical audiences on topics such as cybersecurity governance, risk and compliance;

• Ability to prepare and deliver business and governance presentations;

• Ability to participate in and contribute to cybersecurity governance meetings, working groups and review boards.

• Ability to integrate into an international and multicultural environment, rapid self--starting capability, and experience of working in a team;

• Ability to participate in multilingual meetings;

• Ability to work in a multicultural environment on multiple large projects;

• Ability to establish trusting relationships with counterparts in partnering organisations;

• Excellent team player;

• Ability to understand, speak and write English at C1 level is mandatory;

• High degree of discretion and integrity.