Cyber Risk Assessment Specialist (Cloud and AI)

The role

You will conduct enterprise, service and system-level cyber risk assessments across cloud, AI-enabled and ICT environments. You will support the NATO Enterprise Risk Management Framework and provide reporting for accreditation and risk acceptance decisions.

What you will do

• Conduct and support cyber risk assessments across NATO ICT, cloud, digital and AI-enabled capabilities
• Develop risk assessment methodologies and evaluate risk scenarios
• Support the development and continuous improvement of ERM governance processes
• Assess risks of cloud services, emerging technologies, automation platforms and AI-enabled systems
• Maintain and improve risk registries, dashboards and decision-support tools
• Consolidate inputs from risk and vulnerability assessments, threat intelligence, audits, security reviews and accreditation activities
• Coordinate stakeholders across locations to align on security requirements and risk posture
• Prepare and deliver briefings, presentations and reports to NATO committees and working groups
• Support unforeseen and ad hoc cyber, cloud, AI and interoperability requirements

Required qualifications

• Comprehensive knowledge of computer and network security principles, networking technologies, and vulnerabilities
• Demonstrated experience in vulnerability management, cyber exposure management or cyber risk management
• Demonstrable experience in vulnerability analysis, root cause analysis and risk assessment
• Experience with vulnerability management tools, risk management platforms, dashboards or GRC solutions
• Experience managing or delivering cybersecurity programmes across multiple focus areas
• Demonstrated experience working in cross-functional teams and complex reporting structures
• Strong written and spoken English
• Strong security-focused and analytical mindset
• University degree in a relevant technical field (computer science, systems science, cyber security) or equivalent technical qualification and experience

Nice to have

• Experience securing cloud-based environments and understanding cloud-specific security risks
• Knowledge of NATO Security Policy and its supporting Directives
• Knowledge of NATO CIS Security Accreditation processes, or equivalent national processes
• Recognised professional certifications in cyber security, risk management or project management
• Familiarity with NATO structures and processes
• Exposure to AI governance and AI risk

Before you apply

• Valid National or NATO Secret personal security clearance

About the company

Spektrum supports apex purchasers such as NATO, UN, EU, and National Government and Defence with specialist services. They provide professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise.