Isms Security Architect: Iso 27001 & Risk Management
il y a 20 heures
Pinto
Job Summary We are seeking a highly skilled and experienced Security Architect to contribute in the design, implementation, and maintainance of the Information Security Management System (ISMS) within Airbus Defence and Space, ensuring compliance with new Part IS regulation. Job Responsibilities Contribute to the ISMS implementation and maintenance; documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities; Contribute tothe ISMS inventory through the analysis of their process / procedure and assets identification; Perform, review/update and technically approve security risk assessment on the assets of the Approved Organisation (IT/OT). Using Methods and tools like (MAGERIT/PILAR, EBIOS/FENCE) Define, propose, ensure decision and perform follow up on the security risk treatment plans; Communicate the outcome of the risk assessment and treatment plan to the ISMS manager, other personnel (as the Business Asset Owner), and other organisations sharing an interface (Security Incident Response Leader, Vulnerability Management Team, NISO), Analyse, Perform, review/update and technically approve security incident report on the assets of the Approved Organisation, Define, propose, ensure decision and perform follow up on information security incident response plan, Cooperate on investigations with other organisations that contribute to the information security of its own activities Job Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred. Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role specifically focused on ISMS. Strong expertise in ISO 27001, ENS (Esquema Nacional de Seguridad) implementation and auditing. In-depth knowledge of information security principles, frameworks, and best practices (e.G., NIST, COBIT, NIS2, ENS). Proven experience in security risk assessment methodologies and tools (MAGERIT/PILAR, EBIOS/FENCE) applied to IT/OT environments. Familiarity with various security technologies such as firewalls, IDS/IPS, SIEM, IAM, and data encryption. Knowledge of EASA part 21 and Approved organisations in an aeronautical environment. Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non‑technical audiences. Fluency in English is required; Spanish proficiency is a plus. Airbus Benefits Flexible workshift Option of continuous schedule from May to September Vacation days plus additional days-off along the year (+35 working days off in total) Attractive & competitive salary and additional bonus Hybrid model of working when possible, promoting the work‑life balance Collective transport service in some sites Benefits such as health insurance, employee stock options, retirement plan, or study grants On‑site facilities (among others): free canteen, kindergarten, medical office Possibility to collaborate in different social and corporate social responsibility initiatives Excellent upskilling opportunities and great development prospects in a multicultural environment Special rates in a wide range of products & other benefits The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs. This role will involve occasional travel for business. This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. Company: Airbus Defence and Space SAU Employment Type: Permanent Experience Level: Professional Job Family: Cyber Security Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com. #J-18808-Ljbffr
Serveurs
Vente et Marketing
Chef et Cuisinier
Commerce de détail
Esthétique et Beauté
Bâtiment et Travaux
Restauration Rapide
Art, Médias, Design
Barista
Chauffeur et Livraison
Comptabilité et Finances
Divertissement
Entreposage et Stockage
Gestion
Industrie et Production
Ingénierie
Nettoyage et Entretien
Personnel de cuisine
Rédaction et Édition
Santé et Services Sociaux
Sciences
Secrétariat et Administration
Service juridique
Service à la clientèle
Soins aux animaux
Soins aux enfants
Sports et Bien-être
Sécurité
Technologie de l'nformation
Éducation
Événements et Promotion