ISA = (Interconnection Security Agreement) authorization framework for external connections.

The primary objective is to ensure that external connections are not increasing the overall security risk to Communication and Information System (CIS).

1) ISA service management

This objective includes the handling of the ISA process. This entails:

a) analysis of requests from different stakeholders (internal and external)

b) processing of the requests accordingly with the defined procedures and rules

c) liaise with internal and external stakeholders

d) reviewing and assessment of EC CIS IT Security Plans (ITSP)

e) handling of non-compliances

2) Security inspections in the context of ISA

This objective includes all the tasks required to perform security inspections to external partners, contractors and EC CIS.

These security inspections are in the context of external connections and have the goal to assess compliance with defined security measures. This includes the following activities:

a) Planning

b) Executing

c) Reporting and follow up

3) Service improvement

This objective includes active participation in initiatives with the objective to improve the quality of the service provided. This includes:

Alignment of ISA service with Commissions policies and standards

Alignment of ISA service with new developments in information security

Contribution to the development of related security standards, baselines and guidelines

4) Documentation and statistics

The ISA related documentation and statistics shall be kept up-to-date.

This objective includes the proper production and maintenance of ISA related documentation (e.g. WIKI) and ISA related KPI and statistics.

Knowledge and skills

Following skills and knowledge are required for the performance of the above listed tasks:

• In-depth knowledge of network communications especially from ISO network layer 2 to layer 5 with a specific focus on network security protocols (like MACSec, IPSec TLS/SSL,…)
• Excellent knowledge of information security principles, internationally recognised standards in the field IT security and corresponding implementations

o (Experience in the EU Commission security policy would an asset);

• Good knowledge of fast changing technologies used in the field of workplace and network security solutions/technologies
• Knowledge of IT Security Compliance Management
• Ability to learn efficiently and fast
• Ability to apply high quality standards
• Very good communication skills, adaptable to audiences ranging from senior management to technology specialists, delivered business to technical presentation, in English language
• Strong analytical and problem-solving skills
• Capability to write clear and structured technical documents in English
• Ability to participate in technical meetings and good communication skills
• The ability to work in a proactive and independent manner, with a focus on priorities, communication and decision-making capacities