InfoSec GRC Specialist: Policy, Risk & Compliance

Aernnova Aerospace; Vitoria; Presencial; EUR 52.000 - 82.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Learning & development opportunities

Professional growth in aerospace tech

Descripción de la vacante

Aernnova Aerospace is strengthening its Corporate Cybersecurity Department to lead information security governance across the group. You will define and implement security policies, oversee audits, and drive risk management while ensuring compliance with ISO 27001, ENS, and GDPR.

You will collaborate with multiple departments, coordinate with external stakeholders, and promote ongoing ISMS improvements in a large international aerospace environment.

Formación

• Degree in Computer Science, Cybersecurity, Telecommunications Engineering, or similar.
• Additional cybersecurity training (Master's degree or equivalent) is a plus.

Responsabilidades

• Define, implement, and maintain information security policies, standards, and procedures across the organization.
• Provide cybersecurity support and guidance to different business areas and departments.
• Participate in internal and external information security audits.
• Assess, manage, and monitor cybersecurity risks.
• Monitor compliance with ISO 27001, ENS, GDPR, and other regulations.
• Prepare security reports and management documentation.
• Coordinate with external stakeholders including vendors, auditors, and regulators.
• Collaborate with departments to implement information security policies.
• Promote continuous improvement of the ISMS.

Conocimientos

Information security

Policy development

Regulatory compliance

Risk management

Audits

Educación

Bachelor's or Master’s degree in Computer Science/Cybersecurity/Telecommunications Engineering

Herramientas

ISO 27001

GDPR

ENS - Spanish National Security Framework

Descripción del empleo

Aernnova Aerospace is strengthening its Corporate Cybersecurity Department to lead information security governance across the group. You will define and implement security policies, oversee audits, and drive risk management while ensuring compliance with ISO 27001, ENS, and GDPR.

You will collaborate with multiple departments, coordinate with external stakeholders, and promote ongoing ISMS improvements in a large international aerospace environment.