Staff Officer (Cyber Security/Incident Response Manager)

The Staff Officer (Cyber Security/Incident Response Manager) contributes to the implementation of cyber security and incident response within HQ SACT and subordinate commands. The role involves real-time cyber defense incident handling, risk analysis, development of prevention and incident response plans, and coordination with NATO HQ and ACO to maintain cyber security policies and posture.

Responsibilities

• Contribute to the implementation of the CISOA’s role and responsibilities within HQ SACT and the subordinate commands (JWC, JFTC, JALLC, JATEC).
• Perform real-time cyber defense incident handling tasks (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation).
• Conduct security triage to identify and analyze cyber incidents and threats.
• Actively monitor networks and systems for cyber incidents and threats.
• Conduct risk analysis and security reviews of system logs to identify possible cyber threats.
• Conduct analysis and review, and/or apply network scanners, vulnerability assessment tools, network protocols, internet security protocols, intrusion detection systems, firewalls, content checkers and endpoint software.
• Collect and analyze data to identify cyber security flaws and vulnerabilities and make recommendations that enable prompt remediation.
• Develop and prepare cyber defence incident analysis and reporting.
• Define and maintain tool sets and procedures.
• Develop, implement, and evaluate prevention and incident response plans and activities, and adapt to contain, mitigate or eradicate effects of cyber security incident.
• Provide incident analysis support on response plans and activities.
• Conduct research and development on cyber security incidents and mitigations.
• Create a program development plan that includes security gap assessments, policies, procedures, playbooks, and training manuals.
• Review, develop and deliver relevant training material.
• Contribute to the execution of the Security Accreditation Process in collaboration with ACT Office of Security.
• Design, deploy and maintain the HQ SACT Cyber protection program which is to be complimentary to the capability output of HQ SACT.
• Ensure information/knowledge resources are protected whilst remaining readily accessible and easily retrieved.
• Provide guidance on Cyber evolution across HQ SACT.
• Increase staff awareness and the best practises for Cyber hygiene.
• Contribute with NATO HQ and ACO to develop and maintain the NATO Cyber Security policies.
• Ensure the HQ SACT Cyber Defence Posture Level is maintained in coordination with OCIO and allows the functions of the HQ to continue.
• Develop and maintain external and internal relationships to enable the CDI Branch to achieve its aims.
• Contribute to the Cyber Incident Management for ACT.
• Liaise, when required with HQ SACT Capability Development Directorate (CAPDEV) for the development of current and emerging technologies to enable the development of cutting-edge tools, business management processes whilst protecting critical HQ information.
• Assist with all aspects of CDI Branch as required by the Section Head.

Requirements

• University Degree in computer security, information technology, computer science or related discipline and 2 years function related experience, or Higher Secondary education and completed advanced vocational training in that discipline leading to a professional qualification or professional accreditation with 4 years post related experience.
• A minimum of five years practical experience in Cyber Security and risk management, in a large military or civilian organization.
• Two years’ experience in managing contracted staff.
• Experience in managing IT and Cyber related projects and the management of associated risks.
• Good working knowledge of organizational change management processes and stakeholder management.
• English – SLP 3333 - (Listening, Speaking, Reading and Writing)
• Desirable: An understanding of a National or NATO Capability Management Process.
• Desirable: An understanding of DATA Analysis, Architecture and System Engineering.
• Desirable: P3 Course.
• Desirable: Managing Successful Programmes.
• Desirable: Prince 2 (Agile).
• Desirable: CNAFS (Purchase Requests).

Skills

• Cybersecurity
• Incident Response
• Risk Management
• Contracted Staff Management
• IT Project Management
• Organizational Change Management
• Stakeholder Management
• Risk Analysis
• Prevention Plan Development
• NATO Capability Management
• Data Analysis
• Systems Architecture
• Systems Engineering
• Managing Successful Programmes
• Prince 2 Agile
• CNAFS Purchase Requests
• Cybersecurity Project Management
• Cyber Incident Handling
• Cybersecurity Coordination

Languages

English