Digital Security Compliance Manager
Share
Job Location:
Monthly Salary:
Posted on:
14 hours ago
Vacancies:
1 Vacancy
Job Summary
Job Description:
WHY JOIN US
LIFE IN ALBACETE: QUALITY & CONVENIENCE - Forget long commutes. Albacete offers you the great advantage of a 15-minute city: safe accessible comfortable and perfectly connected. Enjoy a premium standard of living at a
competitive cost ensuring you have the perfect balance between your career and your personal life.
AIRBUS HELICOPTERS: GROW WITH US - We offer more than a job; we offer a community. Immerse yourself in a young collaborative environment that feels like family. As a strategic Center of Excellence we are a global leader in
helicopter production offering you endless potential to grow alongside our major projects. Bring your ideas to a dynamic modern ecosystem and help us build the next generation of aerospace solutions.
DESCRIPTION
Digital Security Compliance Manager is responsible to ensure that AHE Information Security Management System (ISMS) compliance checklists for national and international regulations are established and maintained in conformity with AHE/AH global policies and directives and that these ones together with the associated processes methods and tools demonstrate compliance with the applicable Information Security regulations.
Main activities and responsibilities:
- Lead the implementation maintenance and continuous improvement of the Information Security Management System (ISMS) and the National and International Security Frameworks (ENS NIS2 PART-IS...).
- Develop review and maintain key compliance documentation (Statement of Applicability Security Policies Compliance Plans Security Risk Assessments) and other control frameworks.
- Conduct maturity diagnostics asset identification gap analyses and compliance assessments using CCN-STIC and Airbus Group methodologies.
- Define configure and review technical security controls including hardening network security business continuity and recovery plans.
- Internal audit the security controls and measures.
- Collaborate with the suppliers and vendor assessment and supervision.
- Ensure Product Security.
- Actively participate in the management of certification and conformity audits (internal and external)
- Lead technical and organizational risk analysis and management using methodologies such as Magerit EBIOS RM or ISO 31000 for the selection and prioritization of controls.
- Advise on the life cycle of business and transformation projects ensuring that solutions platforms and services are designed under the principles of secure by design and zero trust.
- Develop proofs of concept and/or pilots of cybersecurity tools on classified environments or environments configured under CCN-CERT regulations evaluating their suitability.
- IT Systems and networks administration and hardening.
- Work cross-functionally with business areas IT security and compliance translating regulatory requirements into effective technical actions.
- Advice and Business Support: Provide expert advice to different business areas on the application of security regulations and the secure design of new IT services and projects in addition to providing support in cross-functional cybersecurity tasks required by the Security department.
- Manage and coordinate security projects autonomously ensuring alignment with corporate policies.
- Prepare periodic reporting to the executive layer on the evolution regulatory compliance and status of security risks.
- Training Awareness and Physical Security: Develop and execute training and awareness plans on cybersecurity and physical security for personnel. Collaborate in the definition and implementation of physical security measures applicable to the systems.
Key competencies
- Autonomy discretion and rigor to apply and follow standards and regulations.
- High Communication skills and a team player able to work in an intercultural environment.
- Able to assess situations quickly and decide on the best course of action.
- Ability to work under pressure and in flexible time if required.
- Manage Authorities & Customer relations.
- Capacity to anticipate risks and difficulties.
- Initiative and proactivity.
- Solution oriented / Welcome problems.
- Flexible to travel on short notice when required
Skills:
- Education in telecommunications or computer engineering or a related scientific-technical field.
- At least 10 years of experience (at least 4 years in Cybersecurity) with proven experience with security policies and processes design and implementation.
- Implementation and maintenance of security controls based (at least 1 desired): ENS NIS2 ISO/IEC 27001 CCN-STIC. 3
- Security risk management (at least 1 desired) (Magerit EBIOS RM ISO 31000).
- Project management skills to develop security plans manage security projects coordinate suppliers and collaborate with other departments.
- High Communication skills and a team player able to work in an intercultural environment.
- Skills in IT Systems Administration Networks AI and digitalization is a plus.
- Certifications in information security (CISSP CISM CRISC Lead Auditor ISO 27001) is a plus.
- Knowledge of Airworthiness regulation is a plus.
- Experience in auditing is a plus.
- Technical knowledge of information security management and cybersecurity risks is a plus.
- Knowledge of ISO 27001 ISO27005 EBIOS RM is a plus.
- Languages: English and Spanish mandatory French is a plus.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity as the foundation for the Companys success reputation and sustainable growth.
Company:
Airbus Helicopters España SAEmployment Type:
Permanent-------
Experience Level:
ProfessionalJob Family:
Cyber SecurityBy submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background age gender disability sexual orientation or religious belief.
Airbus is and always has been committed to equal opportunities for all. As such we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to.
At Airbus we support you to work connect and collaborate more easily and flexibly. Wherever possible we foster flexible working arrangements to stimulate innovative thinking.
Required Experience:
Manager
