IT Security Manager

You will be part of the Accountability for Ukraine Unit, which operates under the direct authority of the Director General for Human Rights and the Rule of Law (DGI). The role is embedded within a dynamic and expanding operational environment, with activities to be carried out across multiple locations, including Strasbourg and The Hague. The IT Security Manager will also be closely co-operating with colleagues from the Directorate of Information Technology.

Your Role

As an IT Security Manager, you will:

• embed cybersecurity principles (confidentiality, integrity, availability) in all IT projects (“security- and privacy-by-design”);
• design and implement security policies and technical standards: secure architecture (cloud or on-prem), access control, data protection, digital integrity, crisis plans;
• provide specific security standards for the relevant legal database, defining the technical and organisational requirements prior to its deployment;
• oversee all phases of the legal database project (design, development, deployment, operation), ensuring compliance with security norms and their integration at each stage;
• regularly audit this core business application to identify any vulnerabilities, verify compliance with standards, and propose corrective actions;
• identify vulnerabilities across all systems, conduct audits, and propose risk management and mitigation strategies in line with international standards (ISO 27001, NIST, etc.) and applicable legal frameworks (e.g., Council of Europe Personal Data Protection Regulations);
• advise on the selection, acquisition, and implementation of secure platforms and tools, including potential use of cloud technologies;
• ensure system compliance with judicial, institutional, and regulatory requirements for security and data protection;
• collaborate with partners to ensure technical interoperability and secure data exchange;
• stay up to date with advances in cybersecurity technologies, cyber threats, and system resilience in justice and institutional contexts;
• ensure the effective integration of security controls in artificial intelligence solutions, including risk assessment, threat mitigation, and monitoring of AI systems to protect against adversarial attacks, data leakage, and misuse.

Requirements to apply

You must:

• hold a higher education degree or qualification equivalent to a Master’s degree (2nd cycle of the Bologna process framework of qualifications for the European Higher Education Area) in cybersecurity, computer science, or a related discipline;
• have at least 5 years of relevant experience in IT security or IT security architecture, including a minimum of 2 years integrating security in sensitive institutional or judicial environments;
• have a very good knowledge of English.

You must also:

• be a citizen of one of the member states of the Council of Europe and fulfil the conditions for appointment to the civil service of that state;
• have discharged any obligation concerning national service (military, civil or comparable);
• not be the parent, child, stepchild or grandchild of a serving staff member of the Council of Europe;