IT Security Manager

You will be part of the Accountability for Ukraine Unit, which operates under the direct authority of the Director General for Human Rights and the Rule of Law (DGI). The role is embedded within a dynamic and expanding operational environment, with activities to be carried out across multiple locations, including Strasbourg and The Hague. The IT Security Manager will also be closely co-operating with colleagues from the Directorate of Information Technology.

As an IT Security Manager, you will:

• embed cybersecurity principles (confidentiality, integrity, availability) in all IT projects (“security- and privacy-by-design”);
• design and implement security policies and technical standards: secure architecture (cloud or on-prem), access control, data protection, digital integrity, crisis plans;
• provide specific security standards for the relevant legal database, defining the technical and organisational requirements prior to its deployment;
• oversee all phases of the legal database project (design, development, deployment, operation), ensuring compliance with security norms and their integration at each stage;
• regularly audit this core business application to identify any vulnerabilities, verify compliance with standards, and propose corrective actions;
• identify vulnerabilities across all systems, conduct audits, and propose risk management and mitigation strategies in line with international standards (ISO 27001, NIST, etc.) and applicable legal frameworks (e.g., Council of Europe Personal Data Protection Regulations);
• advise on the selection, acquisition, and implementation of secure platforms and tools, including potential use of cloud technologies;
• ensure system compliance with judicial, institutional, and regulatory requirements for security and data protection;
• collaborate with partners to ensure technical interoperability and secure data exchange;
• stay up to date with advances in cybersecurity technologies, cyber threats, and system resilience in justice and institutional contexts;
• ensure the effective integration of security controls in artificial intelligence solutions, including risk assessment, threat mitigation, and monitoring of AI systems to protect against adversarial attacks, data leakage, and misuse.

You must:

• hold a higher education degree or qualification equivalent to a Master’s degree () in cybersecurity, computer science, or a related discipline;
• have at least 5 years of relevant experience in IT security or IT security architecture, including a minimum of 2 years integrating security in sensitive institutional or judicial environments;
• have a very good knowledge of English.

You must also:

• be a citizen of one of the member states of the Council of Europe and fulfil the conditions for appointment to the civil service of that state;
• have discharged any obligation concerning national service (military, civil or comparable);
• not be the parent, child, stepchild or grandchild of a serving staff member of the Council of Europe;
• be under the age of 65 years.

Your application must demonstrate to what extent you have the competencies listed below. To help you doing so, feel free to consult our .

• Operational - Planning and work organisation
• Operational - Results orientation
• Operational - Concern for quality
• Interpersonal - Teamwork and co-operation

• Professional and technical expertise: 
  • expertise in cybersecurity standards (ISO 27001, NIST), identity management (IAM), cryptography, and data protection;
  • experience in designing and securing judicial systems: evidence management, chain of custody, strict confidentiality;
  • experience in auditing, vulnerability analysis, crisis management and drafting remediation plans;
  • experience with GDPR compliance and other international regulations (convention 108+);
  • ability to collaborate in multidisciplinary teams and deliver in sensitive or high-security contexts;
  • competence in the security of artificial intelligence systems: understanding threats to AI, experience in implementing secure AI architectures (e.g., privacy-preserving machine learning, adversarial robustness), and ability to conduct risk analysis and mitigation for AI-enabled solutions.

• Professional and technical expertise:
  • certifications: CISSP, CISM, CEH, ISO 27001;
  • experience with international tribunals, hybrid courts, or international justice systems;
  • familiarity with evidence management tools and judicial databases;
  • experience in crisis management and monitoring cyber threats;
  • skills in digital forensics and chain of custody protocols;
  • knowledge of Ukrainian and/or Russian is an asset;
  • experience in institutional post-conflict or transitional settings;
  • experience with AI-based tools and ethical, legal, and technical aspects of AI security.

This job vacancy is for an international external recruitment. You can consult the conditions of employment (salaries, allowances, pension scheme, social insurance, etc.) on the webpage .

For more information on how we recruit, you can consult the page . This recruitment is carried out in accordance with Article 490 of the Council of Europe Staff Rules. The deadline for applications is indicated in the General information section of this vacancy notice (see above) and is fixed at 23:59:59 (CET/CEST). When applying, make sure your motivation shows how your competencies make your profile the best for the role.

As an equal opportunity employer, the Council of Europe welcomes applications from all suitably qualified people, irrespective of sex, gender, sexual orientation, ethnic or social origin, disability, religion or belief. Under its equal opportunity policy, the Council of Europe is aiming to achieve gender parity in staff employed in each category and grade. At the time of appointment, preference between suitable people shall be given to the person of the gender which is under-represented in the relevant grades within the category to which the vacancy belongs.

Applicants with specific needs are encouraged to request reasonable accommodations at any stage during the recruitment process. Please contact us at , we will ensure that your request is handled.

The information published on the CoE’s careers website regarding working conditions is correct at the time of publication of the vacancy notice. Any changes to these conditions during the recruitment process will be updated on our Portal and will apply at the time of the job offer. Our career's website is not intended to be exhaustive and may not address all questions you would have. Should you have remaining questions, please contact us at .