Vacancy Notice. Vacancy Number: Grade: A-2 Administrator (Information Security & Assurance) Division/Office:

Transcription

1 Vacancy Notice Vacancy Number: Grade: A-2 Title: Administrator (Information Security & Assurance) Division/Office: Information Security Section, NAEW&C HQ NATO Body: HQ NAEW&C Force GK Country: Germany Closing Date: 14 July 2016 Point of Contact: Mr. R. Gülpen, Mrs. S. Janshoff, GENERAL: Applications are invited for the post listed above. This post is due to be filled as soon as possible. Applicants are required to strictly adhere to the instructions on how to apply in order to ensure that their applications receive full and proper consideration. Please note that only applicants who succeed in the initial screening will receive a response. In order to follow the status of a vacancy please refer to our web site In principle, applications will only be accepted from nationals of the following countries which contribute to the budget of the NAEW&C Force HQ: i.e. Belgium, Czech Republic, Denmark, Germany, Greece, Hungary, Italy, Luxembourg, Norway, Poland, Portugal, Romania, Spain, The Netherlands, Turkey and the United States of America. Note: The only exception to the above is when applications are received from NATO International Civilian (NIC) serving staff members. Potential candidates are herewith informed that this recruitment process may be suspended or discontinued prematurely at any point in the future as a result of ongoing developments and decisions relating to organizational, structural, or financial issues, or for any other valid reasons. Consequently there can be no guarantee that any candidate will ultimately be appointed to this post. Any future employment may be affected by possible changes to the establishment and/or new NATO Civilian contract policy. NIC serving staff members will be offered a contract according to the NATO Civilian Personnel Regulations (NCPR). Newly recruited personnel will be offered a definite duration contract. Normally the Civilian Personnel Selection Board (CPSB) will only consider the applications of candidates fully meeting all the essential qualifications of the job description. When no candidates apply who meet all the essential qualifications, the CPSB may decide to consider candidates not possessing all of the essential qualifications. If such candidates are selected, they will be appointed at a lower grade and their

2 employment contract will stipulate the conditions under which the grade attached to the post can be granted and the employment contract confirmed. 2. POST CONTEXT: The NAEW&C Force is a unique organization operating as a multi-national fully integrated Air Force, with responsibilities of a Sending State and Force Provider. The comprehensive process-based,mission-orientated Force Review, endorsed by the North Atlantic Council (NAC), confirmed that there is a requirement for the Force to fulfil many of the MOD and Air Headquarters functions that typically support a national air force as well as the specific responsibilities placed upon the Force Commander by NAPMO MoUs. The NAEW&C Force HQ organizational and functional structures enables independence and separation of governance, oversight, regulatory functions and responsibilities from the execution level (E-3A/D Components), particularly the E-3A Component and Mission System Engineering Centre (MSEC) collocated NATO Air Base Geilenkirchen. To make the most efficient and effective use of a smaller HQ PE, the two-level hierarchy uses a reach up, reach down concept whereby the NAEW&C Force HQ allots some of its resources, to support the services or resource requirements of the E-3A Component Commander. The reach up, reach down capability will be reflected in appropriate NAEW&C HQ Job Descriptions. The E-3A Component commander is responsible for maintaining the readiness of all elements of the NATO E-3A Component to support operational employment of the NATO E-3A Airborne Warning and Control System (AWACS) aircraft as directed by SACEUR through the Commander, Air Command Ramstein. The Office of the Commander (COM) supports the COM/DCOM by providing the administrative functions necessary to coordinate the staff functions needed to manage a NATO organization. The Information Security Section provides principle advice to the E-3A Component senior leadership through COM on CIS related security matters (INFOSEC, COMPUSEC, COMSEC, EMSEC, and TRANSEC). The Section Head (Information Security) E-3A Component is responsible for the ongoing management of information security policies, procedures, and technical systems in order to maintain the confidentially, integrity, and availability of all HQ NAEW&C Information systems. The Administrator is involved in all tasks related to the roles of IT Site Security Officer (ADPSSO), as specified in NATO security directives. Performs technical security advice and consultancy functions to management through active involvement in the life-cycle of IT/CIS systems and services ensuring that information security issues are adequately resolved at all stages of the life cycle, and by developing a strong security culture, mainly through awareness program. 3. REPORTS TO: Section Head (Information Security), or designated supervisor. 4. PRINCIPAL DUTIES: Responsible for: Performing the duties of E-3A Component Cosmic Top Secret/Atomal Control Officer (CACO); Formulating information security (INFOSEC) procedures and acting as INFOSEC Operational Authority (IOA) executive officer for local and wide area networks at the E-3A Component as required; Executing and at times also coordinating E-3A Component efforts on information security &

3 assurance and supporting internal and external security inspections; Implementing the E-3A Component IT risk management policy for COMPUSEC and NETSEC throughout the E-3A Component including the FOBs/FOL and deployed locations; Providing briefings on Information Security & Assurance (COMPUSEC) matters and attending Information Security & Assurance (COMPUSEC) related committees and meetings; Assisting in the identification of Information Security & Assurance (COMPUSEC and NETSEC) requirements and developing achievement plans, ensuring the maintenance of appropriate administration files; Monitoring execution of Information Document Security measures throughout the E-3A Component including FOBs/FOL and deployed locations; Developing an inspection programme and conducting inspections to ensure that policy/controls are understood and followed throughout the E-3A Component including FOBs/FOL and deployed locations; Providing specialised support in the security accreditation process of the E-3A Component IT/CIS systems; Performing and directing investigations of IT/CIS related theft/attempted theft/security violations or breaches, misuse of IT/CIS equipment, software or services, and compromise of information stored, processed or transmitted in electromagnetic form; Developing, supervising and providing Information Security & Assurance (COMPUSEC and NETSEC) training, coaching and supporting E-3A Component personnel with COMPUSEC related roles and responsibilities; The incumbent deputises for Section Head (Information Security) (OEW GIX 0010). 5. ADDITIONAL DUTIES: Responsible for: Performing other duties as assigned; May be required to undertake operational deployments and/or TDY both within and outside NATO s boundaries; For operational or other valid reasons, the incumbent may be required, at the discretion of the responsible supervisor, to carry out a similar range of duties in any organizational element of the headquarters, at the same grade, without necessitating a change to the employment contract. This situation could continue for an unspecified period during which the aforementioned operational or valid reasons prevail. NB: For this purpose, the responsible supervisor is defined as the head of the organizational element within which both ranges of duties are located; Required to participate in exercises, contingency and emergency operations. In this connection, will be required to wear protective clothing/equipment unless exempted for medical reasons. During these periods, may temporarily be required to perform duties outside the normal scope of this job description to support mission accomplishment; Responsible to maintain a level of personal fitness appropriate to the assigned duties and responsibilities; Attends, as directed, additional training courses/programmes relevant to the abovementioned duties. The employee may be required to perform a similar range of duties elsewhere within the organisation at the same grade without there being any change to the contract. 6. ESSENTIAL QUALIFICATIONS:

4 a. Professional/Experience: Experienced in the management of both physical and logical information security systems. Outstanding interpersonal and communication skills. Must possess a high degree of integrity and trust along with ability to work independently. Experienced in development and implementation of INFOSEC planning and policies. Experienced in evaluation and accreditation of telecommunication and information systems. Experienced in security requirements analysis. Knowledge and use of IT security tools and techniques in developing effective COMPUSEC procedures. Broad and in-depth knowledge of COMSEC and COMPUSEC principles and their application to the development of effective INFOSEC programs. b. Education/Training: University Degree in Information Technology (IT) or related fields and 2 years function related experience, or a Higher Secondary education and completed advanced vocational training leading to a professional qualification or professional accreditation with 4 years post related experience. c. Security Clearance: COSMIC TOP SECRET d. Language: Standard NATO Language Profile (SLP). The 4-digit SLP refers to listening, speaking, reading and writing in that sequence; the level number stands for: 1 Elementary; 2 Fair (limited working); 3 Good (minimum professional); 4 Very Good (full professional); 5 Excellent (native/bilingual). English 3333 Note: The work, both oral and written, in this post and in this headquarters as a whole, is conducted mainly in English. e. Standard Automated Data Processing (ADP) Knowledge: The four NATO standards of ADP Knowledge are: No Knowledge, Basic Knowledge, Working Knowledge, and Advanced Knowledge. Word Processing: Advanced Knowledge Spreadsheet: Working Knowledge Graphics Presentation: Working Knowledge Database: Working Knowledge Client/Web Browser: Working Knowledge Web Content Management: Working Knowledge f. Physical/Medical Prerequisites: Must fulfill medical prerequisites of occupational health code as specified in the HQ NAEW&C Force GK Occupational Health Examination Programme. 7. DESIRABLE QUALIFICATIONS: a. Professional/Experience: Previous NATO assignment. Experience working in an international/military environment.

5 Knowledge of and experience in application of best practices regarding requirements, standards, technologies and products in the field of information security. Experience with Mainframe Systems and MS Windows OS and UNIX OS network operations, administration and security. Recent experience as an information security manager for medium to large-scale local or wide area networks. Excellent project management, written and oral communication skills desired. Ability to work collaboratively with a broad range entities/organizations. In-depth knowledge of government technology laws. CISSP (Certified Information Security Professional Certification). Strong technical skills (application and operating system hardening, vulnerability assessment, security audits, TCP/IP, intrusion detection systems, firewalls, etc.). b. Education/Training: Completed NATO specific Information Security & Assurance courses. Member of recognized professional institution or body. Chartered Engineer. c. Language: English SLP CIVILIAN POSTS: a. Personal Attributes: Must be capable of objective in-depth review and analysis to define problem areas/needs and creative thinking to devise methods for enhancement. Must be able to employ sound judgement to interpret directives to determine their applicability to any given situation, task or requirement. Must be capable of analytical, constructive thinking to apply a broadly defined set of regulations covering all aspects of Information Security & Assurance (COMPUSEC), including security accreditation, installation, day-to-day operation, training and investigation. Will be required to work independently with little supervisory guidance. Problem cases, however, may be referred to senior staff. Must be able to integrate in a team and to foster team spirit. Must be able to effectively communicate within the multinational environment for problem identification and resolution. Must be capable to effectively present and brief findings of analysis and investigations. b. Managerial Responsibilities: As the E-3A Component INFOSEC Site Security Officer (ADPSSO) provides technical direction to all other HQ/Wing/FOBs/FOL ADPSSOs. As the E-3A Component COSMIC TOP SECRET and ATOMAL Control Officer (CACO) manages the handling and control for all documents and media classified CTS and above. c. Professional Contacts: Maintains regular day-to-day internal professional contacts at own and higher level within Command Group and with staff members throughout the E-3A Component on matters pertaining to assigned responsibilities and duties. Maintains frequent external professional contacts with Information Security & Assurance staffs at higher headquarters, i.e. NATO Information Security & Assurance Technical Centre (NIATC) regarding COMPUSEC, investigation and training matters. d. Contribution to the Objectives:

6 Ensures formal security accreditation for E-3A Component IT/CIS systems in support of the E-3A Component s mission. Administers Information Security & Assurance (COMPUSEC) inspection, training, documentation and IT/CIS security accreditation issues. As ADPSSO and point of contact on COMPUSEC matters at the E-3A Component, ensures consistent implementation of the organisation s COMPUSEC policies and procedures. e. Work Environment: Standard NATO office environment with full office automation and IT support. Offices are located on the premises of a military air base (exposure to noise and aircraft fumes is moderate). Risk of injury is therefore normally limited to those hazards occurring on a routine basis in an office environment. Work may involve the extensive use of computer equipment including the use of Visual Display Units (VDUs), keyboards and visual media devices. f. Shift Work: No shift work, except during exercises and deployments, times of tension and crisis. 9. SALARY AND CONDITIONS OF EMPLOYMENT: Salary and conditions of employment will be in accordance with the NATO Civilian Personnel Regulations (NCPR). The monthly basic salary, including current adjustments, for a NATO A-2 post in Germany is The salary and allowances paid by the organization are exempted from income tax. The place of duty will be at the NATO Air Base Teveren, near Geilenkirchen, Germany. 10. APPLICATION PACKAGES (Hereinafter referred to as Applications): PLEASE READ CAREFULLY (How to Apply) Candidates are requested to strictly adhere to the following instructions: a. Applications must be forwarded to the following address: HQ NAEW&C Force GK Civilian Personnel Branch/Recruitment Post Box D Geilenkirchen b. Applications must quote the above-mentioned advertisement number. c. Only applications containing complete and pertinent information and documentation will be taken into consideration. As a minimum, application packages must include a fully completed HQ NAEW&C Force GK Application Form and a fully completed Post Requirements Form (both forms can be obtained on the following Internet site: Candidates must answer every question on both forms completely in English. Expressions such as please see attached CV, please see annex, please see enclosed document, etc. are not acceptable. d. Applications must also include documentary evidence of the educational and vocational requirements as listed under essential qualifications. Applicants are further requested to supply documentary evidence in support of the statements made in the application (such

7 as certificates of other education/training, evaluation sheets, job descriptions, letters of appreciation/recommendation, etc.). Do not submit the original texts of references or testimonials. Any documentation submitted in a language other than English must be accompanied by at least an unofficial translation. e. If you are or have been a NATO civilian (or a civilian in one of the Coordinated Organizations), please indicate your last grade and step held, and specify in which NATO Body (or Coordinated Organization) you are/were employed. f. Applications should be submitted by normal mail (German military personnel and German BMVg civil servants must send their applications through BMVg P II 4 in accordance with ZDv 14/5) to reach the above address not later than the above-mentioned closing date in order to be considered. 11. SERVING MEMBERS OF THE INTERNATIONAL CIVILIAN STAFF OF ANY NATO BODY: Article 57.1 NCPR: Serving members of the international civilian staff of any NATO body may apply for this vacancy. The applications of such staff members shall be examined together with those of outside candidates. Where relevant qualifications and suitability are equal, preference will be given to serving candidates. 12. REDUNDANT STAFF: Article 57.2 NCPR: Staff members who become redundant shall be given the opportunity to apply for the vacant posts throughout the organization and the candidature of such staff members for a post of their own grade shall be considered before other recruitment is put in hand.