Cybersecurity Governance Unit

The Directorate-General for Information Technologies and Cybersecurity (DG ITEC), delivers to the European Parliament digitally advanced, secure, resilient, compliant and sustainable information and communications technology (ICT) services.

The Cybersecurity Governance (CYBERGOV) Unit, is part of the Cybersecurity and IT Governance (GOV) directorate that safeguards a robust, compliant, sustainable and secure IT ecosystem and architecture. It facilitates the work of the whole DG ITEC, ensuring participative, consistent and transparent decision making and implementation. It is responsible for transversal tasks, including enterprise architecture, obsolescence and legacy management, risk management business continuity, and quality management. It is responsible for the compliance with EU Regulations and the governance for cybersecurity, AI, interoperability, innovation and digital accessibility.

The selected trainee will join the Cybersecurity Governance Unit (CYBERGOV) within the Directorate for Cybersecurity and IT Governance. The role focuses on creating new or improving existing European Parliament cybersecurity documentation, contributing to the development and implementation of the European Parliament’s user-awareness programme and the user-related elements of its Cybersecurity Maturity Action Plan, and assisting in cybersecurity policy, secure-by-design practices and controls in alignment with ISO 27000 series methodologies and practices.

Key Focus Areas:

1.      Security Policies, Standards and Controls

• Conduct research on current cybersecurity trends and best practices, including secure-by-design, cloud security, identity and access management, and zero-trust approaches. 

2.      User Awareness

• Participate in organising cybersecurity awareness events, sessions and campaigns.;
• Develop awareness materials such as flyers, guides, presentations, digital learning content, scenarios and quizzes;
• Identify training needs for non-technical staff and contribute to targeted awareness programmes aimed at encouraging secure behaviour;
• Support the collection of feedback and engagement data to improve awareness activities. 

3.      Cooperation, Security Governance and Compliance

• Support security governance initiatives and the communication of relevant policies and standards;
• Help identify synergies and opportunities for joint activities with other EP services, EU institutions, international organisations, universities and relevant external partners;
• Assist in developing ICT security requirements and documentation efforts;
• Contribute to the implementation of operational best practices in security governance. 

The trainee may also collaborate with European Parliament Computer Emergency Response Team (EP CERT), Cybersecurity Operations (CYBERSEC ) and other relevant services where their activities support awareness, cybersecurity policy, risk management or secure-by-design objectives.

• You have obtained/will obtain a university degree (level 6 of EQF or higher) at least three months before the starting date of the traineeship;
• You have a degree in a relevant technical, educational, or behavioural discipline, such as ICT, Cybersecurity, instructional design or educational technology;
• Understanding of fundamental ICT security concepts, standards, policies, procedures, tools and controls;
• Good knowledge of cybersecurity awareness, adult learning, training-needs analysis and common workplace technologies;
• Ability to translate technical cybersecurity topics into clear and engaging messages for non-technical audiences;
• Ability to work independently and collaboratively within a tea;
• Strong commitment to continuous learning and improvement;
• Proficient verbal and written communication skills;
• Experience with Windows or Linux operating systems would be an advantage. 

The European Parliament is dedicated to fostering an inclusive and equitable workplace. We welcome all candidates, regardless of their geographical, racial or ethnic origin, political or religious beliefs, age, disability, gender identity, sexual orientation, socioeconomic background, civil status, or family situation.