Security Architect for ISMS

Prestwick Aerosystems; Getafe; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Hybrid work model

On-site facilities

Career development opportunities

Descripción de la vacante

Airbus Defence and Space SAU is seeking a Security Architect to lead the design, implementation, and maintenance of the ISMS in alignment with Part IS regulations. You will collaborate across IT/OT, engage with risk assessments, and apply standards like ISO 27001, NIST, COBIT and ENS.

Fluency in English is required with Spanish a plus. The role involves risk treatment planning, incident response coordination, and working within a NATO/national security framework, with potential for travel and a

Formación

• Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.
• Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role focused on ISMS.
• Strong expertise in ISO 27001, ENS implementation and auditing.
• In-depth knowledge of information security principles, frameworks, and best practices (NIST, COBIT, NIS2, ENS).

Responsabilidades

• Contribute to the ISMS implementation and maintenance.
• Documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities.
• Contribute to the ISMS inventory through analysis of processes, procedures and assets.
• Perform, review/update and approve security risk assessment on IT/OT assets.
• Use methods and tools like MAGERIT, PILAR, EBIOS/FENCE.
• Define, propose, decide and follow up on risk treatment plans.
• Communicate risk assessment outcomes to ISMS manager and related teams.
• Assist investigations and coordination with other organisations on information security.

Conocimientos

ISO 27001

NIST/ COBIT / NIS2 / ENS

ISMS security architecture

Security risk assessment

MAGERIT

PILAR

EBIOS/FENCE

Firewalls / IDS-IPS / SIEM / IAM

Data encryption

Educación

Bachelor's degree in Computer Science or Information Security

Master's degree preferred

Herramientas

MAGERIT

PILAR

EBIOS/FENCE

Descripción del empleo

Job Summary

We are seeking a highly skilled and experienced Security Architect to contribute in the design, implementation, and maintainance of the Information Security Management System (ISMS) within Airbus Defence and Space, ensuring compliance with new Part IS regulation.

Job Responsibilities

• Contribute to the ISMS implementation and maintenance
• Documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities
• Contribute to the ISMS inventory through the analysis of their process / procedure and assets identification
• Perform, review/update and technically approve security risk assessment on the assets of the Approved Organisation (IT/OT)
• Using Methods and tools like (MAGERIT/PILAR, EBIOS/FENCE)
• Define, propose, ensure decision and perform follow up on the security risk treatment plans
• Communicate the outcome of the risk assessment and treatment plan to the ISMS manager, other personnel (as the Business Asset Owner), and other organisations sharing an interface (Security Incident Response Leader, Vulnerability Management Team, NISO)
• Analyse, Perform, review/update and technically approve security incident report on the assets of the Approved Organisation
• Define, propose, ensure decision and perform follow up on information security incident response plan
• Cooperate on investigations with other organisations that contribute to the information security of its own activities

Job Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.
• Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role specifically focused on ISMS.
• Strong expertise in ISO 27001, ENS (Esquema Nacional de Seguridad) implementation and auditing.
• In-depth knowledge of information security principles, frameworks, and best practices (e.g., NIST, COBIT, NIS2, ENS).
• Proven experience in security risk assessment methodologies and tools (MAGERIT/PILAR, EBIOS/FENCE) applied to IT/OT environments.
• Familiarity with various security technologies such as firewalls, IDS/IPS, SIEM, IAM, and data encryption.
• Knowledge of EASA part 21 and Approved organisations in an aeronautical environment.
• Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
• Fluency in English is required; Spanish proficiency is a plus.

Airbus benefits

At Airbus we are focused on our employees and their welfare. Take a look at some of our social benefits: Flexible workshift Option of continuous schedule from May to September Vacation days plus additional days-off along the year (+35 working days off in total) Attractive & competitive salary and additional bonus Hybrid model of working when possible, promoting the work-life balance Collective transport service in some sites Benefits such as health insurance, employee stock options, retirement plan, or study grants On-site facilities (among others): free canteen, kindergarten, medical office Possibility to collaborate in different social and corporate social responsibility initiatives Excellent upskilling opportunities and great development prospects in a multicultural environment Special rates in a wide range of products & other benefits

Additional Information

The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs. This role will involve occasional travel for business. This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company and Employment Details

Company: Airbus Defence and Space SAU Employment Type: Permanent Experience Level: Professional Job Family: Cyber Security

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking. Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus offers modern and fuel-efficient airliners and associated services. Airbus is also a European leader in defence and security and one of the world's leading space businesses. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions and services worldwide. From sending your resume to participating in successful interviews, here you can access all important pieces of information to guide you in your candidate journey.

Learn more