Risk and Control Unit

The Directorate-General for Information Technologies and Cybersecurity (DG ITEC) delivers digitally advanced, secure, resilient, compliant and sustainable information and communications technology (ICT) services for the European Parliament.

Risk and Control Unit within the DG for Information Technologies and Cybersecurity:

Mission

Ensure DG ITEC’s operational resilience, compliance, and security by managing the Internal Control Framework (MICS), Business Continuity, and Risk Management, with a strong focus on cybersecurity and post-implementation controls.

Key Functions

• Internal Control - define and coordinate the Internal Control Plan and ensure alignment with corporate standards;
• Risk Management - identify, assess, and mitigate operational, budgetary, reputational, and cybersecurity risks;
• Business Continuity - coordinate resilience measures against disruptions such as cyberattacks, natural disasters, or system failures;
• Audit & Compliance - liaise with internal/external auditors; conduct ex-post controls and propose framework improvements;
• Cybersecurity - perform ex-ante risk assessments on IT projects and validate mitigation actions ex-post;
• Ensures compliance and strengthens governance;
• Embeds security and resilience.

• Support monitoring the implementation of the European Parliament's Cybersecurity action plan;
• Contribute to reporting of progress with the implementation of the action plan;
• Assist with different elements of internal control, in particular ex post controls;
• Participate in the review of technical and administrative documentation, including security policies and procedures.

• You have obtained/will obtain a university degree (level 6 of EQF or higher) at least three months before the starting date of the traineeship;
• You have preferably a Master in Cyberjustice, Law of the digital economy or related studies.
  
  

The European Parliament is dedicated to fostering an inclusive and equitable workplace. We welcome all candidates, regardless of their geographical, racial or ethnic origin, political or religious beliefs, age, disability, gender identity, sexual orientation, socioeconomic background, civil status, or family situation.