Security Architect for ISMS

Airbus Defence and Space; Getafe; Híbrido; EUR 60.000 - 80.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible workshift

Competitive salary and bonus

Health insurance

Vacation days (+35 days off)

Hybrid working model

Free canteen and on-site facilities

Descripción de la vacante

Airbus Defence and Space in Getafe is seeking a Security Architect to enhance the Information Security Management System (ISMS). The role involves implementing risk assessment methodologies, ensuring compliance with regulations, and collaborating across departments.

The ideal candidate should have extensive experience in information security, demonstrate problem-solving skills, and possess a computer science background. Airbus offers competitive salaries, flexible working conditions, and numerous employee benefits.

Formación

• Minimum of 5 years of experience in information security.
• At least 3 years in a Security Architect role focused on ISMS.
• Strong expertise in ISO 27001 and ENS implementation.

Responsabilidades

• Contribute to ISMS implementation and maintenance.
• Perform and approve security risk assessment on assets.
• Communicate outcome of risk assessments to stakeholders.

Conocimientos

Information Security

Security Risk Assessment

ISO 27001

Analytical Skills

Problem-Solving Skills

Communication Skills

Fluency in English

Spanish Proficiency

Educación

Bachelor's degree in Computer Science or Information Security

Master's degree (preferred)

Herramientas

MAGERIT/PILAR

EBIOS/FENCE

Firewalls

IDS/IPS

SIEM

IAM

Data encryption

Descripción del empleo

Job Summary

We are seeking a highly skilled and experienced Security Architect to contribute in the design, implementation, and maintainance of the Information Security Management System (ISMS) within Airbus Defence and Space, ensuring compliance with new Part IS regulation.

Job Responsibilities

• Contribute to the ISMS implementation and maintenance; documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities;
• Contribute to the ISMS inventory through the analysis of their process / procedure and assets identification;
• Perform, review/update and technically approve security risk assessment on the assets of the Approved Organisation (IT/OT). Using Methods and tools like (MAGERIT/PILAR, EBIOS/FENCE)
• Define, propose, ensure decision and perform follow up on the security risk treatment plans;
• Communicate the outcome of the risk assessment and treatment plan to the ISMS manager, other personnel (as the Business Asset Owner), and other organisations sharing an interface (Security Incident Response Leader, Vulnerability Management Team, NISO),
• Analyse, Perform, review/update and technically approve security incident report on the assets of the Approved Organisation,
• Define, propose, ensure decision and perform follow up on information security incident response plan,
• Cooperate on investigations with other organisations that contribute to the information security of its own activities

Job Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.
• Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role specifically focused on ISMS.
• Strong expertise in ISO 27001, ENS (Esquema Nacional de Seguridad) implementation and auditing.
• In-depth knowledge of information security principles, frameworks, and best practices (e.g., NIST, COBIT, NIS2, ENS).
• Proven experience in security risk assessment methodologies and tools (MAGERIT/PILAR, EBIOS/FENCE) applied to IT/OT environments.
• Familiarity with various security technologies such as firewalls, IDS/IPS, SIEM, IAM, and data encryption.
• Knowledge of EASA part 21 and Approved organisations in an aeronautical environment.
• Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non‑technical audiences.
• Fluency in English is required; Spanish proficiency is a plus.

Airbus Benefits

• Flexible workshift
• Option of continuous schedule from May to September
• Vacation days plus additional days-off along the year (+35 working days off in total)
• Attractive & competitive salary and additional bonus
• Hybrid model of working when possible, promoting the work‑life balance
• Collective transport service in some sites
• Benefits such as health insurance, employee stock options, retirement plan, or study grants
• On‑site facilities (among others): free canteen, kindergarten, medical office
• Possibility to collaborate in different social and corporate social responsibility initiatives
• Excellent upskilling opportunities and great development prospects in a multicultural environment
• Special rates in a wide range of products & other benefits

The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs.

This role will involve occasional travel for business.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company: Airbus Defence and Space SAU

Employment Type: Permanent

Experience Level: Professional

Job Family: Cyber Security

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail].