Files
cybersecurity-risk-manager/references/skills.md
2026-08-14 17:33:55 +02:00

3.8 KiB

Competences — cybersecurity risk manager

Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/7754d570-9519-48c2-b1c9-8e165f8bca0f).

Essential

  • advice on security risk management (skill/competence)
  • assessment of risks and threats (knowledge)
  • attack vectors (knowledge)
  • communicate with stakeholders (skill/competence)
  • cyber attack counter-measures (knowledge)
  • cyber security (knowledge)
  • engage with stakeholders (skill/competence)
  • ensure adherence to organisational ICT standards (skill/competence)
  • establish an ICT security prevention plan (skill/competence)
  • establish an Information Security Management System (skill/competence)
  • ethical hacking principles (knowledge)
  • ICT network security risks (knowledge)
  • ICT performance analysis methods (knowledge)
  • ICT safety (nan)
  • ICT security standards (knowledge)
  • implement ICT risk management (skill/competence)
  • information security strategy (knowledge)
  • internal risk management policy (knowledge)
  • manage system security (skill/competence)
  • risk management (knowledge)
  • security engineering (knowledge)
  • security threats (knowledge)

Optional

  • audit techniques (knowledge)
  • cloud monitoring and reporting (knowledge)
  • cloud security and compliance (knowledge)
  • computer forensics (knowledge)
  • decision support systems (knowledge)
  • define security policies (skill/competence)
  • define technology strategy (skill/competence)
  • design for organisational complexity (skill/competence)
  • develop information security strategy (skill/competence)
  • develop with cloud services (skill/competence)
  • domain name service (knowledge)
  • execute ICT audits (skill/competence)
  • hybrid model (knowledge)
  • ICT encryption (knowledge)
  • ICT problem management techniques (knowledge)
  • ICT process quality models (knowledge)
  • ICT project management (knowledge)
  • ICT quality policy (knowledge)
  • ICT recovery techniques (knowledge)
  • ICT security legislation (knowledge)
  • ICT system user requirements (knowledge)
  • identify ICT security risks (skill/competence)
  • implement a firewall (skill/competence)
  • implement a virtual private network (skill/competence)
  • implement anti-virus software (skill/competence)
  • implement cloud security and compliance (skill/competence)
  • implement ICT security policies (skill/competence)
  • implement spam protection (skill/competence)
  • information confidentiality (knowledge)
  • internet governance (knowledge)
  • Internet of Things (knowledge)
  • investment analysis (knowledge)
  • lead disaster recovery exercises (skill/competence)
  • legal requirements of ICT products (knowledge)
  • levels of software testing (knowledge)
  • manage disaster recovery plans (skill/competence)
  • manage keys for data protection (skill/competence)
  • mobile device management (knowledge)
  • Open source model (knowledge)
  • organisational resilience (knowledge)
  • Outsourcing model (knowledge)
  • remove computer virus or malware from a computer (skill/competence)
  • service-oriented modelling (knowledge)
  • solve ICT system problems (skill/competence)
  • systems development life-cycle (knowledge)
  • tools for ICT test automation (knowledge)
  • use an application-specific interface (skill/competence)
  • use back-up and recovery tools (skill/competence)
  • use ICT ticketing system (skill/competence)
  • web application security threats (knowledge)

Market evidence (job-ad analysis, 55 ads, as of 2026-07-11)

Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs.

Hard skills

  • risk assessment — 44 %
  • risk management — 25 %
  • cybersecurity risk management — 24 %

Methods

  • risk management framework (RMF) — 20 %