ECA/2024/26 - Information Security officer (1 post) - Secretariat-General

WHO WE ARE

The European Court of Auditors (ECA) was established in 1975 as the European Union’s external auditor. One of the EU’s seven institutions, it is based in Luxembourg and employs around 1000 audit and administrative staff of all EU nationalities.

The ECA operates as a collegiate body of 27 Members, one from each EU Member State. Our auditors check that the EU keeps good accounts and correctly applies its financial rules, and that its policies and programmes achieve their intended objectives and deliver value for money.

Through our work, we can make a difference by helping the EU to make a better use of its money. We contribute to improving the EU’s financial management and promote accountability and transparency. We warn of risks, provide assurance, indicate shortcomings and successes and offer guidance to EU policymakers and legislators. We present our observations and recommendations to the European Parliament, the Council of the EU, and national governments and parliaments, as well as the general public.

We are a modern and dynamic organisation striving for and promoting excellence, professionalism, transparency and integrity. We define ourselves as a diverse, flexible and equitable institution, which offers every individual the opportunity to maximise their talent. Through our individual and collective involvement in the ECA’s activities and our ambitious training programme, our aim is to make the ECA an intellectually stimulating workplace, and a learning-based organisation that relies on institutional knowledge and motivated and well-trained people to serve the EU and its citizens.

We are an EU institution on a human scale: this facilitates integration, allows for easier interaction, and encourages teamwork. We offer flexible working hours and teleworking, also from outside the place of residence. We value diversity and inclusion, promote equal opportunities, and ensure a respectful working environment based on open communication, dialogue, and mutual trust. Staff engagement, well-being and greening are important pillars of our internal policies.

The Secretariat-General (SG) is responsible for managing all aspects of the ECA’s administration: staff, budget, language and publication services, learning and development, digital workplace, security, safety, and business continuity. Its mission is to provide appropriate resources, services and facilities to enable the European Court of Auditors (ECA) to accomplish its mission and achieve its strategic objectives. The SG comprises three Directorates, and is responsible for the Secretariat of the Cour, the Data Protection and the Information Security officers. 

WHAT WE ARE OFFERING

This vacancy notice is being issued on the basis of Article 29(1)(a), (b) and (c) of the Staff Regulations of Officials of the European Union. 

The advertised position is therefore open ONLY to AD officials of the European Court of Auditors, AD officials of other EU institutions and  successful candidates in an EU AD competition[1].

We are seeking to recruit one Information Security officer to work transversally across the ECA under the supervision of the ECA’s Secretary-General. The selected candidate will be responsible for:

—  assessing and managing information-security risks, breaches and incidents;

—  developing information-security awareness through information, training and education programmes;

—  providing advice and opinions on information security;

—  creating and updating policies, guidelines and security procedures;

—  monitoring the implementation of these policies, guidelines and procedures, and carrying out security reviews as appropriate;

—  being the Registry Control Officer’s deputy for managing European Union Classified Information (EUCI); 

—  carrying out on-the-spot compliance tests;

—  auditing the security level of ECA events & security conventions;

—  managing links/liaisons with external authorities and professional bodies.

[1]     Organised by EPSO or by one of the EU institutions.

WHAT WE ARE LOOKING FOR

The advertised position is open to applicants who, on the deadline for applications, meet the eligibility criteria set out in the Staff Regulations, as well as the following criteria:

1.           Knowledge of languages

English and French are the ECA’s official working languages. For this position, a sound knowledge of one of these two languages (minimum level C1 in understanding, speaking and writing) is required.

Good knowledge (minimum B2 in understanding, speaking and writing) of the other language will be an asset.

Please indicate in your CV the language level according to the following assessment model: https://europa.eu/europass/en/common-european-framework-reference

2.         Experience and skills

During the selection process, applicants will need to demonstrate the following:             

—   experience of information security projects;

—   experience of managing Information Security Policies, rules and procedures (ISO27X, BSI, NIST, etc.);

—   a sound background in PKI;

—   experience of risk management and incident management;

—   experience of monitoring IT networks and IT infrastructure;

—   a high sense of integrity and confidentiality;

—   a responsible and proactive attitude;

—   good communication skills, especially in knowledge sharing and awareness raising; 

—   an ability to work autonomously and in a team with a service-oriented attitude; 

—   strong negotiation skills.

3.      Assets  

In addition to the above, the following diplomas or certificates will be considered an asset:

—  a bachelor’s degree or a master’s degree in Information Security;

—  a Certified Information Systems Security Professional (CISSP);

—  ISO 27001 certification; 

—  Personal Security Clearance (PSC) to access EUCI.

APPLICATIONS

The deadline for applications is 12:00 (midday) Luxembourg time on 8 January 2025.

Applications must be submitted only via the online form provided for the advertised position and must comprise the following documents in English or French:

-       a cover letter;

-       an up-to-date CV, preferably in the Europass format (see https://europa.eu/europass/);

-      (only for EU officials not at the ECA) a document confirming your function group, grade and status as an official.

Successful candidates in an EU AD open competition must quote the relevant reference number in their CV or cover letter.

Any application received after the deadline or which is not submitted using the online form will be rejected.

The selection committee will evaluate applications based solely on the information given in these documents. It may ask candidates to provide supporting evidence for statements made in their applications. If candidates fail to provide such evidence when it is requested, their applications will be rejected.

To ensure that your application is completed on time, we strongly advise you not to wait until the last few hours to apply. Experience has shown that the system may become overloaded as the deadline approaches.

RECRUITMENT POLICY

EQUAL OPPORTUNITIES AND REASONABLE ACCOMMODATIONS

In line with ECA’s Diversity and Inclusion policy and Article 1d of the Staff Regulations, the ECA embraces diversity and promotes equal opportunities. We accept applications without discrimination on any grounds, and we take steps to ensure that recruitment is evenly balanced between women and men, as required by Article 23 of the Charter of Fundamental Rights of the European Union. We also take measures to reconcile working life with family life.

If you require any special arrangements for a specific handicap or disability in order to take part in this selection procedure, please send an email in good time to ECA-Selection@eca.europa.eu.

DATA PROTECTION

The ECA is committed to ensuring that applicants' personal data are processed in compliance with Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018, on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

For more information, see our specific privacy statement on recruitment at the following address: https://www.eca.europa.eu/Lists/ECADocuments/Specific_Privacy_Statement_vacancies/Specific_Privacy_Statement_vacancies_EN.PDF