C004606, Cyber Security Risk Assessment and Coordination Officer

Duties

• Identify the scope and objective of NDWC's security risk assessments;
• Coordinate risk considerations between the CISPIA, the CISOA, the CISP and the SAA;
• determine which physical, personnel and information assets contribute to the fulfilment of the mission of a CIS or an organisation's mission;
• determine the asset's prioritization based on the assets value to the organization, identify threats and vulnerabilities to the risk environment and their level;
• identify existing and required security measures to mitigate the risk;
• collect, and track risk information to streamline sharing and act as a knowledge base for future reference;
• determine risk treatments for risk avoidance, elimination, risk reduction, or acceptance;
• Develop Key Performance Indicators (KPI) and Key Risk Indicators(KRI);
• Develop the following:
• a Security Risk Management (SRM) Report, including the objective and scope of the security risk assessment,
• and asset, threat, and vulnerability summary,
• a description of the security measures to be implemented,
• a description of the residual risk,
• and the processes for ongoing security risk management;
• Manage and develop the risk management part of each CIS security accreditation document set consisting of:
• the SRM report, Security Risk Assessment (SRA)
• Security Operating Procedures (SecOPs),
• Security Requirement Statement (SRS), which is formulated for specific CIS (SSRS), and tested by a Security Test and Verification Plan (STVP);
• lead and coordinate the risk management team from stakeholders from the organisational components responsible for the following:
• physical security;
• personnel security;
• security of information;
• threat assessment;
• CIS security; and
• (f) industrial security.

Requirements

• Bachelor's degree in relevant field
• 3 years of experience in Cyber Risk management working with NATO Cyber risk management process or industry Cyber risk management process
• Extensive experience using risk management and assessment tools

Desirable:

• Master's degree in relevant field
• Experience with PILAR risk management assessment tool
• Industry Risk certification