Cybersecurity Governance, Risk & Compliance (GRC) Specialist

Aernnova Aerospace; Vitoria; Presencial; EUR 52.000 - 82.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Learning & development opportunities

Professional growth in aerospace tech

Descripción de la vacante

Aernnova Aerospace is strengthening its Corporate Cybersecurity Department to lead information security governance across the group. You will define and implement security policies, oversee audits, and drive risk management while ensuring compliance with ISO 27001, ENS, and GDPR.

You will collaborate with multiple departments, coordinate with external stakeholders, and promote ongoing ISMS improvements in a large international aerospace environment.

Formación

• Degree in Computer Science, Cybersecurity, Telecommunications Engineering, or similar.
• Additional cybersecurity training (Master's degree or equivalent) is a plus.

Responsabilidades

• Define, implement, and maintain information security policies, standards, and procedures across the organization.
• Provide cybersecurity support and guidance to different business areas and departments.
• Participate in internal and external information security audits.
• Assess, manage, and monitor cybersecurity risks.
• Monitor compliance with ISO 27001, ENS, GDPR, and other regulations.
• Prepare security reports and management documentation.
• Coordinate with external stakeholders including vendors, auditors, and regulators.
• Collaborate with departments to implement information security policies.
• Promote continuous improvement of the ISMS.

Conocimientos

Information security

Policy development

Regulatory compliance

Risk management

Audits

Educación

Bachelor's or Master’s degree in Computer Science/Cybersecurity/Telecommunications Engineering

Herramientas

ISO 27001

GDPR

ENS - Spanish National Security Framework

Descripción del empleo

You will work on challenging projects alongside outstanding professionals, with opportunities for professional growth and international experience.

We are looking to strengthen Aernnova's capabilities in information security, regulatory compliance, and risk management within the Corporate Cybersecurity Department.

What we are looking for

You will be responsible for defining, implementing, and maintaining information security policies and procedures, ensuring their effective deployment and compliance across the organization. The role also provides cybersecurity support and guidance to different business areas and departments.

• Develop, update, and maintain information security policies, standards, and procedures.
• Implement security policies and procedures across the Group’s companies.
• Participate in internal and external information security audits.
• Assess, manage, and monitor cybersecurity risks.
• Monitor compliance with applicable regulations and standards (ISO 27001, ENS - Spanish National Security Framework, GDPR, etc.).
• Prepare security reports and management documentation.
• Coordinate and liaise with external stakeholders, including vendors, auditors, and regulatory bodies.
• Collaborate with different departments to ensure effective implementation of information security policies.
• Promote continuous improvement of the Information Security Management System (ISMS).

Requirements

• Degree in Computer Science, Cybersecurity, Telecommunications Engineering, or similar.
• Additional training in cybersecurity (Master's degree or equivalent is a plus).
• olid understanding of information security frameworks and regulations (ISO 27001, ENS - Spanish National Security Framework, GDPR).
• Experience or knowledge in: Information systems auditing, Risk assessment and risk management, Implementation of security controls and procedures

What we offer

• The benefits of working in a large international company; Aernnova is the leading Tier 1 supplier in Spain and the 10th worldwide.
• Learning and development opportunities.
• Professional growth in an advanced aerospace technology environment.
• A collaborative and team-oriented working environment.
Competitive compensation based on experience and professional value.

By submitting your curriculum vitae or application, you agree that Aernnova may use, store and process personal information and data about you for the purpose of tracking and managing the process related to your application or future employment. Your personal data will be subject to the Aernnova Group's Conditions of Processing Data Protection - Aernnova Web and the Privacy Policy - Aernnova Weband such information will only be used by Aernnova.

Aernnova is firmly committed to contributing to the achievement of the Sustainable Development Goals through its ESG Action Plan. This plan focuses, among others, on contributing to a net-zero emissions aviation industry, reducing energy use, emissions and noise, actions aimed at respecting human rights and promoting safe and healthy work, as well as strong corporate governance.

Along these lines, the Aernnova Group is committed to equal opportunities for all people as a fundamental pillar of professional and personal development. Therefore, we welcome all candidates regardless of race, gender, marital status, ideology, nationality, religion, or any personal, physical, or social condition.

Join us in championing sustainable aviation, protecting the planet, and creating a better future for all.