Security Architect for ISMS

Job Description:

Job Summary:**

We are seeking a highly skilled and experienced Security Architect to contribute in the design, implementation, and maintainance of the Information Security Management System (ISMS) within Airbus Defence and Space, ensuring compliance with new Part IS regulation..

Job Responsibilities:**

• Contribute to the ISMS implementation and maintenance; documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities;
  
• Contribute to the ISMS inventory through the analysis of their process / procedure and assets identification:
  
• Perform, review/update and technically approve security risk assessment on the assets of the Approved Organisation (IT/OT). Using Methods and tools like (MAGERIT/PILAR, EBIOS/FENCE)
  
• Define, propose, ensure decision and perform follow up on the security risk treatment plans,
  
• Communicate the outcome of the risk assessment and treatment plan to the ISMS manager, other personnel (as the Business Asset Owner), and other organisations sharing an interface (Security Incident Response Leader, Vulnerability Management Team, NISO),
  
• Analyse, Perform, review/update and technically approve security incident report on the assets of the Approved Organisation,
  
• Define, propose, ensure decision and perform follow up on information security incident response plan,
  
• Cooperate on investigations with other organisations that contribute to the information security of its own activities
  

Job Qualifications:**

* Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.
* Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role specifically focused on ISMS.
* Strong expertise in ISO 27001, ENS (Esquema Nacional de Seguridad) implementation and auditing.
* In-depth knowledge of information security principles, frameworks, and best practices (e.g., NIST, COBIT, NIS2, ENS).
* Proven experience in security risk assessment methodologies and tools (MAGERIT/PILAR, EBIOS/FENCE) applied to IT/OT environments.

* Familiarity with various security technologies such as firewalls, IDS/IPS, SIEM, IAM, and data encryption.

* Knowledge of EASA part 21 and Approved organisations in an aeronautical environment.
* Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
* Fluency in English is required; Spanish proficiency is a plus.

Airbus benefits

At Airbus we are focused on our employees and their welfare. Take a look at some of our social benefits:

• Flexible workshift
• Option of continuous schedule from May to September
• Vacation days plus additional days-off along the year (+35 working days off in total)
• Attractive & competitive salary and additional bonus
• Hybrid model of working when possible, promoting the work-life balance
• Collective transport service in some sites
• Benefits such as health insurance, employee stock options, retirement plan, or study grants
• On-site facilities (among others): free canteen, kindergarten, medical office
• Possibility to collaborate in different social and corporate social responsibility initiatives
• Excellent upskilling opportunities and great development prospects in a multicultural environment
• Special rates in in a wide range of products & other benefits

The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs.

This role will involve occasional travel for business.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:
Airbus Defence and Space SAU

Employment Type:
Permanent
-------

Experience Level:
Professional

Job Family:
Cyber Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com .

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.