Security Chapter Lead (m/f/n)

We are supporting a long-term project for a major EU public-sector organization.

• Bachelor's degree in Information Security, Computer Science, or related field; advanced degree or relevant certifications (e.g., CISSP, CISM, CISA) are a plus.
• Proven experience (minimum 5 years) in information security focusing on strategy, governance, operations, and compliance.
• Strong understanding of security frameworks, standards, and best practices (e.g., NIST Cybersecurity Framework, CIS Controls, OWASP Top 10).
• Experience leading and managing cross-functional security teams in dynamic environments.
• Excellent communication, leadership, and stakeholder management skills.
• Strong analytical, problem-solving, and decision-making skills with strategic mindset.
• EU citizenship.
• Fluency in English (written and spoken) is required; proficiency in other European languages is a plus.

Security Strategy and Governance:

• Develop and maintain the security strategy and roadmap for the consortium organization, aligned with business objectives, regulatory requirements, and industry best practices.
• Organize the Security Office team to ensure smooth delivery and process-based relationship with technical squads using ticketing and planning systems.
• Establish and enforce security policies, standards, and procedures across squads and chapters, ensuring compliance with laws, regulations, and contractual obligations.
• Provide strategic guidance and recommendations to senior leadership and the Security Office on security posture and risk management.

Security Architecture and Engineering:

• Define and maintain security architecture and design principles for IT systems, applications, and infrastructure, incorporating security-by-design principles.
• Collaborate with architecture and engineering teams to evaluate, select, and implement security technologies, tools, and solutions.
• Conduct security architecture reviews, assessments, and audits, identifying vulnerabilities and recommending remediation.

Security Awareness and Training:

• Develop and deliver security awareness and training programs for employees, contractors, and stakeholders.
• Provide guidance on security best practices, secure coding principles, and threat mitigation techniques.
• Monitor and measure effectiveness of security awareness and training initiatives.

Security Compliance and Assurance:

• Collaborate with internal audit, compliance, and legal teams to ensure adherence to security requirements and contractual obligations.
• Maintain security documentation, evidence, and artifacts to demonstrate compliance.

Security Operations and Incident Response:

• Oversee security operations including monitoring, detection, and response to security incidents and breaches.
• Lead the Security Incident Response Team (SIRT), coordinating investigation and mitigation of incidents.
• Develop and maintain incident response plans, playbooks, and procedures; conduct regular exercises and simulations.

This job requires initiating the process of obtaining a Security Clearance certificate. EU citizenship is required.