Trusted Jobs

Job Description

The European Union Agency for the Space Programme (EUSPA) is an operational EU Agency that provides safe and secure European satellite navigation services, promotes the commercialization of Galileo, EGNOS, and Copernicus data and services. It also coordinates the EU’s forthcoming governmental satellite communications programme GOVSATCOM. EUSPA is also responsible for the security accreditation of all the Components of the EU Space Programme. For more information on the EUSPA and the EU Space Programme, click here.

A core task for EUSPA is security of the EU Space Program. The Security Authority (SAU) Department proactively contributes to the fulfilment of the missions of the Agency by providing the security expertise in order to (1) ensure that the components of the Space Program are defined, implemented and exploited securely, (2) achieve successful security accreditation of the components of the Program, (3) ensure a wide, secure and sustainable use of the services provided by the different components, (4) ensure the protection of classified information’s.

In particular, the GSMC Local Security Office (GSMC LSO) implements and monitors the correct implementation of the applicable security rules, as laid down in Commission Decision (EU, Euratom) 2015/444. In coordination with the Central Security Office (CSO) and the Security Offices of the other Agency sites, the GSMC Local Security Office supports the functions of the Security Authority of the Agency ensuring the on-site implementation of the security rules, managing the GSMC EU Classified Information (EUCI) Registries and COMSEC accounts, supporting the performance of the GSMC operations and in maintaining the accreditation of the Agency’s infrastructure and IT assets deployed at the GSMC sites.

The place of employment for this position is Madrid, an international city with several things to offer: breathtaking art, complex culture, exquisite food, and rich history. The capital of Spain has excellent connections to the rest of the country, as well as to the rest of the world, and is famous for its vibrant nightlife and welcoming people.

Qualifications We Are Looking For

We are looking for a new colleague to join the security team in the Galileo Security Monitoring Centre located in Spain (GSMC-ES). The job holder will act as a Registry Control Officer (RCO) and Crypto Custodian (CC). He/she will be responsible for the administration and upkeep of the GSMC-ES classified document registers and for the day to day administration and handling of classified information. He/she will be also responsible for the physical security, setup and operations of all COMSEC items within the GSMC-ES account, as well as for supporting the Crypto Authority team of the Security Authority Department in the handling of crypto items.

The GSMC-ES RCO/CC reports to GSMC Local Security Office Team Leader and has the following main tasks and responsibilities:

Registry Control Officer tasks:

• Encode the classified documents into the electronic database and enforce the access rules to the databases through implementation of need-to-know policy;
• Register classified documents (hard copy, optical media, etc.) and assets (hard disk drives, workstations, servers, etc.) in a timely manner;
• Prepare classified documents for dispatch (electronic or hand carriage) through implementati on of relevant procedures;
• Receive classified documents through electronic means or hand carriage and ensure their post-receipt distribution to users in a timely manner following the relevant procedures (e.g. cross-system uploading through need-to-know observation);
• Destroy redundant classified documents in cooperation with Local Security Officer (LCO);
• Prepare regular back-ups of classified data to ensure data integrity at all times (on-site and off-site);
• Participate in the regular audits carried out by the Local Security Officer;
• Carry out comprehensive briefings for all GSMC-ES permanent staff, contractors and consultants about the rules on handling of EU classified information;
• Ensure that good security practices regarding the handling of classified information are followed at all times in GSMC-ES through close collaboration with GSMC-ES Local Security Officer;
• Contribute, in cooperation with other GSMC-ES security staff, to all internal security investigations, and report on security breaches and other security events/incidents within GSMC-ES.

Crypto Custodian tasks:

• Manage (safeguard and control) all accountable crypto material in his/her custody and account;
• Keep the inventory of the COMSEC items received, for his/her custody and further distribution, whilst verifying and assuring the integrity of the seals of the envelopes and parcels;
• Verify the implementation of the minimum-security measures in accordance with the relevant security requirements needed for the safe custody of the COMSEC items, in order to prevent compromise;
• Report immediately any security breach, compromise or potential compromise of the COMSEC items under his/her responsibility;
• Perform the encryption keys distribution for GSMC-ES;
• Ensure that all COMSEC transfers involving the EUSPA site(s) are properly performed, recorded and that all the items are packed in accordance with the defined transportation plans when arriving; draft the transportation plans; act as a courier when required;
• Update and maintain the GSMC-ES crypto account SOPs;
• Maintain and perform the crypto operations procedures in accordance with the GSMC Concept of Operations (CONOPS) and the GSMC COMSEC Key Management Plan;
• Operate IT and COMSEC equipment for key material management to make equipment ready for use by the Operations team;
• Perform the regular maintenance operations of the GSMC COMSEC items.

The GSMC-ES RCO/CC shall be available for regular on-call duties outside normal working hours (availability by phone with readiness to come back to the site within predefined elapsed times that will be established to meet operational external requirements). The duties associated with such ‘on-call’ shall be of a nature similar to those of the main duties of the post, but will also include a wider set of activities aimed at ensuring the security and technical availability of the site focussing on feared events and their related initial reaction procedures.

Language use: The above tasks and responsibilities will be conducted in the English language.

Recruitment Process

The selection procedure is open to applicants who satisfy the following eligibility criteria, on the closing date for application:

1. Have a level of education which corresponds to completed university studies of at least three years attested by a diploma
2. Be a national of a Member State of the European Union, Iceland or Norway
3. Be entitled to his or her full rights as citizen
4. Have fulfilled any obligations imposed by the applicable laws concerning military service
5. Meet the character requirements for the duties involved
6. Have a thorough knowledge of one of the languages of the European Union and a satisfactory knowledge of another language of the European Union to the extent necessary for the performance of his/her duties
7. Be physically fit to perform the duties linked to the post

this job offer is not open for applications