100 lines
3.8 KiB
Markdown
100 lines
3.8 KiB
Markdown
# Competences — cybersecurity risk manager
|
|
|
|
Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/7754d570-9519-48c2-b1c9-8e165f8bca0f).
|
|
|
|
## Essential
|
|
|
|
- **advice on security risk management** (skill/competence)
|
|
- **assessment of risks and threats** (knowledge)
|
|
- **attack vectors** (knowledge)
|
|
- **communicate with stakeholders** (skill/competence)
|
|
- **cyber attack counter-measures** (knowledge)
|
|
- **cyber security** (knowledge)
|
|
- **engage with stakeholders** (skill/competence)
|
|
- **ensure adherence to organisational ICT standards** (skill/competence)
|
|
- **establish an ICT security prevention plan** (skill/competence)
|
|
- **establish an Information Security Management System** (skill/competence)
|
|
- **ethical hacking principles** (knowledge)
|
|
- **ICT network security risks** (knowledge)
|
|
- **ICT performance analysis methods** (knowledge)
|
|
- **ICT safety** (nan)
|
|
- **ICT security standards** (knowledge)
|
|
- **implement ICT risk management** (skill/competence)
|
|
- **information security strategy** (knowledge)
|
|
- **internal risk management policy** (knowledge)
|
|
- **manage system security** (skill/competence)
|
|
- **risk management** (knowledge)
|
|
- **security engineering** (knowledge)
|
|
- **security threats** (knowledge)
|
|
|
|
## Optional
|
|
|
|
- audit techniques (knowledge)
|
|
- cloud monitoring and reporting (knowledge)
|
|
- cloud security and compliance (knowledge)
|
|
- computer forensics (knowledge)
|
|
- decision support systems (knowledge)
|
|
- define security policies (skill/competence)
|
|
- define technology strategy (skill/competence)
|
|
- design for organisational complexity (skill/competence)
|
|
- develop information security strategy (skill/competence)
|
|
- develop with cloud services (skill/competence)
|
|
- domain name service (knowledge)
|
|
- execute ICT audits (skill/competence)
|
|
- hybrid model (knowledge)
|
|
- ICT encryption (knowledge)
|
|
- ICT problem management techniques (knowledge)
|
|
- ICT process quality models (knowledge)
|
|
- ICT project management (knowledge)
|
|
- ICT quality policy (knowledge)
|
|
- ICT recovery techniques (knowledge)
|
|
- ICT security legislation (knowledge)
|
|
- ICT system user requirements (knowledge)
|
|
- identify ICT security risks (skill/competence)
|
|
- implement a firewall (skill/competence)
|
|
- implement a virtual private network (skill/competence)
|
|
- implement anti-virus software (skill/competence)
|
|
- implement cloud security and compliance (skill/competence)
|
|
- implement ICT security policies (skill/competence)
|
|
- implement spam protection (skill/competence)
|
|
- information confidentiality (knowledge)
|
|
- internet governance (knowledge)
|
|
- Internet of Things (knowledge)
|
|
- investment analysis (knowledge)
|
|
- lead disaster recovery exercises (skill/competence)
|
|
- legal requirements of ICT products (knowledge)
|
|
- levels of software testing (knowledge)
|
|
- manage disaster recovery plans (skill/competence)
|
|
- manage keys for data protection (skill/competence)
|
|
- mobile device management (knowledge)
|
|
- Open source model (knowledge)
|
|
- organisational resilience (knowledge)
|
|
- Outsourcing model (knowledge)
|
|
- remove computer virus or malware from a computer (skill/competence)
|
|
- service-oriented modelling (knowledge)
|
|
- solve ICT system problems (skill/competence)
|
|
- systems development life-cycle (knowledge)
|
|
- tools for ICT test automation (knowledge)
|
|
- use an application-specific interface (skill/competence)
|
|
- use back-up and recovery tools (skill/competence)
|
|
- use ICT ticketing system (skill/competence)
|
|
- web application security threats (knowledge)
|
|
|
|
<!-- market-evidence -->
|
|
|
|
## Market evidence (job-ad analysis, 55 ads, as of 2026-07-11)
|
|
|
|
Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs.
|
|
|
|
### Hard skills
|
|
|
|
- risk assessment — **44 %**
|
|
- risk management — **25 %**
|
|
- cybersecurity risk management — **24 %**
|
|
|
|
### Methods
|
|
|
|
- risk management framework (RMF) — **20 %**
|
|
|
|
<!-- market-evidence -->
|