4.5 KiB
4.5 KiB
Competences — chief ICT security officer
Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/276ba420-ef09-4a0e-b215-2c2e2f80ad28).
Essential
- advice on security risk management (skill/competence)
- assessment of risks and threats (knowledge)
- attack vectors (knowledge)
- audit techniques (knowledge)
- communicate with stakeholders (skill/competence)
- comply with legal regulations (skill/competence)
- cyber attack counter-measures (knowledge)
- cyber security (knowledge)
- data protection (knowledge)
- decision support systems (knowledge)
- develop information security strategy (skill/competence)
- educate on data confidentiality (skill/competence)
- engage with stakeholders (skill/competence)
- ensure adherence to organisational ICT standards (skill/competence)
- ensure compliance with legal requirements (skill/competence)
- ensure cross-department cooperation (skill/competence)
- ensure information privacy (skill/competence)
- establish an ICT security prevention plan (skill/competence)
- establish an Information Security Management System (skill/competence)
- ethical hacking principles (knowledge)
- ethics (knowledge)
- forecast organisational risks (skill/competence)
- ICT network security risks (knowledge)
- ICT process quality models (knowledge)
- ICT project management (knowledge)
- ICT project management methodologies (knowledge)
- ICT safety (nan)
- ICT security legislation (knowledge)
- ICT security standards (knowledge)
- identify ICT security risks (skill/competence)
- implement corporate governance (skill/competence)
- implement ICT risk management (skill/competence)
- implement ICT security policies (skill/competence)
- information confidentiality (knowledge)
- information security strategy (knowledge)
- internal risk management policy (knowledge)
- lead disaster recovery exercises (skill/competence)
- maintain plan for continuity of operations (skill/competence)
- manage disaster recovery plans (skill/competence)
- manage IT security compliances (skill/competence)
- manage system security (skill/competence)
- monitor developments in field of expertise (skill/competence)
- monitor technology trends (skill/competence)
- organisational resilience (knowledge)
- risk management (knowledge)
- security engineering (knowledge)
- utilise decision support system (skill/competence)
Optional
- apply operations for an ITIL-based environment (skill/competence)
- assess ICT knowledge (skill/competence)
- cloud monitoring and reporting (knowledge)
- cloud security and compliance (knowledge)
- cloud technologies (knowledge)
- computer forensics (knowledge)
- computer programming (knowledge)
- conduct impact evaluation of ICT processes on business (skill/competence)
- control objectives for information and related technology (knowledge)
- coordinate technological activities (skill/competence)
- create solutions to problems (skill/competence)
- execute ICT audits (skill/competence)
- ICT communications protocols (knowledge)
- ICT encryption (knowledge)
- ICT infrastructure (knowledge)
- ICT recovery techniques (knowledge)
- ICT system user requirements (knowledge)
- identify legal requirements (skill/competence)
- implement a firewall (skill/competence)
- implement a virtual private network (skill/competence)
- implement anti-virus software (skill/competence)
- implement cloud security and compliance (skill/competence)
- internet governance (knowledge)
- Internet of Things (knowledge)
- manage digital identity (skill/competence)
- manage keys for data protection (skill/competence)
- manage staff (skill/competence)
- optimise choice of ICT solution (skill/competence)
- protect personal data and privacy (skill/competence)
- software anomalies (knowledge)
- train employees (skill/competence)
- use different communication channels (skill/competence)
- web application security threats (knowledge)
- World Wide Web Consortium standards (knowledge)
Market evidence (job-ad analysis, 48 ads, as of 2026-07-10)
Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs.
Hard skills
- risk management — 46 %
- incident response — 44 %
- vulnerability management — 29 %
- risk assessment — 23 %
- network security — 19 %
Responsibilities
- team leadership — 19 %