GSA Crypto Authority Manager

The European Global Navigation Satellite Systems Agency (GSA) has set up a selection procedure that aims to establish a reserve list for:

(Vacancy Reference Number: GSA/2018/520)

TASKS AND RESPONSIBILITIES

The GSA Crypto Authority Manager reports to the GSA Security Authority (implemented by the Head of the GSA Security Department) and supports

the EU GNSS Crypto Authority for matters pertaining to EU GNSS Programme

COMSEC duties delegated to the GSA by the European Commission. For the performance of the tasks, the jobholder is supported by a team of GSA staff and security experts.

The tasks and responsibilities shall in principle include (without limitation) and subject to adjustment by his/her line manager:

1. Governance

Hold the roles of GSA Crypto Authority, GSA TEMPEST Authority and GSA (Crypto) Distribution Authority in support to the GSA Security Authority
Support the European Commission in the implementation of COMSEC governance of the EU GNSS Programmes, including the management and implementation of the COMSEC duties of the EU GNSS (Crypto) Distribution Authority (EU GNSS DA)
Maintain and implement GSA and EU GNSS DA COMSEC Policy & Processes
Advise the GSA Security Authority and hierarchy on COMSEC matters of importance to the Agency; subsequently oversee and/or participate on matters where COMSEC is important
Establish centralised COMSEC accountability and oversight within the GNSS Programme
Chair the EU GNSS COMSEC Advisory Forum and report status to the EU GNSS Security Board
Support GSA in the governance of the Galileo Service Operator implementation of COMSEC policy

2. COMSEC Accounting

Identify the COMSEC assets used and developed in the GNSS Programmes and assure their delivery in compliance to the European Commission Crypto Approval process
Take operational decisions in support of the GSA/EU GNSS COMSEC accounts; in particular, instruct the operational delivery and oversee the management and conduct of COMSEC operations for critical EU GNSS Programme cryptographic key material, e.g. satellite flight keys
Establish the location and accounting for existing COMSEC assets in the EU GNSS Programme
Review and approve COMSEC Transportation Plans
Manage pan-European COMSEC services in support of the EU GNSS Programmes; in particular EU GNSS Programme cryptographic messaging services

3. Compliance & Incident control

Maintain the EU GNSS Programme COMSEC Risk Register
Audit GSA/EU GNSS DA COMSEC accounts
Register and investigate COMSEC incidents
Give assurance evidence to the GNSS Security Accreditation Board via its Crypto Distribution Authority Task Force
Conduct technical review and appraisal of the EU GNSS Programme Crypto chains for the purposes of establishing authorisation to operate them and compliance with operating constraints thereafter

4. Improving European COMSEC

Provide direct advice to National (Crypto) Distribution Authorities (NDA) and EU GNSS Industry (on invitation by the relevant NDA)
Organise EU GNSS COMSEC meetings and events to promote better NDA co-operation on European COMSEC matters
Participate to the COMSEC Formation of EU GNSS Security Board working group for the Protection of Classified Information

5. GSA Security Management

Support the GSA Security Authority on security matters and act as deputy when required
Contribute to GSA annual work plans and financial management
Manage the GSA Central Security Office in particular by co-ordinating activities concerning:

o the protection of EU Classified Information

o the integration of COMSEC into wider GSA security policy

o the compliance to the EU GNSS Programme Security Instructions

o the management of PRS Information according to Decision No 1104/2011/EU

Participate and contribute to GSA Security Accreditation panels as a COMSEC expert in order to advise the GSA Security Accreditation Authority on security risks to GSA systems
Provide support to PRS and Cyber security teams on COMSEC matters pertaining to their work
Manage Security projects and budgets assigned by the GSA Security Authority and report organisational management
Collect and report operational quality metrics in accordance with ISO9001 processes

Place of employment: Prague (Czech Republic)

Application deadline: ~~27/03/2018 11:59 a.m. (CET)~~

~~New Deadline: 16/04/2018~~

New deadline 30/04/2018 – 11:59

GSA Crypto Authority Manager – European Global Navigation Satellite Systems Agency (GSA)