Information Security Advisor (Data Security)

Spektrum supports apex purchasers (NATO, UN, EU and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Role Background

Under the direct supervision of Senior Information Security Officer (SISO) and in close collaboration with relevant Information and Communications Technology (ICT) Units at Headquarters (HQ) and worldwide ICT Teams, the successful candidate will be responsible for supporting the Global Cybersecurity Strategy , in the area of Information Security and Risk Management including application security, data security, threat, vulnerability, risk, and compliance management.

Role Duties and Responsibilities

• Create, implement, and manage Data Security function and processes;
• Create, implement, and manage data loss prevention program including processes, procedures, training, and playbooks;
• Improve maturity level of data security to the defined higher level; and measure and report the progress regularly by developing Key Performance Indicators (KPI)/metrics for performance and risk monitoring;
• Contribute to the review, consistent implementation and compliance-monitoring of IOM-wide information security policies, operating procedures standards, and guidelines;
• Coordinate and/or support security audit requests and track follow up on recommendations (including FISMA/NIST 800-53 controls, ISO 27001);
• Participate actively in the implementation of the Global Cybersecurity Strategy, including the support of awareness-related activities and coordinating global workshops / webinars;
• Monitors and audits information security controls while measuring results and responding to new risks. Gathers, develops and organizes evidence for security audit;
• Conduct business continuity planning and business impact assessments;
• Conduct data protection impact assessments;
• Assist in investigation and audit;
• Provide advice to request/tickets related to data security, rotation and access;
• Provide advisory to support decision-making activities related to data security topics;
• Perform such other duties as may be assigned.

Working Location

• Valencia, Spain

Working Policy

• On-Site