Deputy Chief Information Security Officer (H/F)
We trust our employees to bring bold ideas to build the future of aerospace together, contributing to our ranking by TIME as the leading Aerospace & Defense company on the 2023 World's Best Companies list (on the full list). Join our team and become part of the group that's making amazing things happen on the ground and in the skies. Together, we'll proudly step back and say, "We did that."
In the role of Deputy Chief Information Security Officer, you'll play a pivotal part on our Information Systems team.
Job Summary:
As SAFRAN CABIN Deputy CISO, the incumbent reports directly to the SAFRAN CABIN Global CISO. He is asked to protect the organization Information systems and its Data. His primary role is to define Information Systems security policy and to ensure it is implemented. This role is of an advisory, support, information, training, and alert. This role may intervene directly in all or part of the IT and telecoms systems of his/her professional scope.
Summary of Duties:
- Enforcement of SAFRAN Security strategy, policies, standards, and procedures.
- Management of all security incidents affecting USA, Canada, and Mexico sites.
- Recommending security projects to address vulnerabilities.
- Ensuring effective management of all security equipment/solutions utilized by USA, Canada, and Mexico sites.
- Established as the Security authority and provide guidance to other departments such as Compliance, Programs, Engineering, Operations, and IS for all security-related topics.
- Participate in all security-related project steering committees, ensuring security compliance and ensuring security projects are completed in line with customer or regulatory deadlines.
- Responsible for reviewing/authorizing infrastructure design proposals, advising the global CISO about the proposals and providing guidance to IS project teams from a security perspective.
- Responsible for auditing of security systems/solutions and reporting of audit results as requested by the Global CISO.
- Responsible for definition, application, and enforcement of IS security policy as well as development of all required security documentation needed to support the process.
- Support the Global CISO with internal controls documentation/testing.
- Support Global CISO by coordinating security awareness campaigns and training.
- Support Global CISO in proper implementation of Security in IT Projects and development of action plans to address any gaps in the solutions/processes.
- Ability to manage a Cyber Incident Handler expert and improve Incident Response process.
- Work with the Global SOC team to resolve security incidents affecting USA, Canada, and Mexico sites.
Qualifications
Education: Bachelor's degree
Experience: 5-7 years of experience in a similar role and at a similar level
- Experience in various IT/IS disciplines, technologies, and platforms (Infrastructure, networking, firewalls, communication protocols, databases, and mobility).
- Experience with implementing/managing security for applications, IS infrastructure, Active Directory, or cloud-based solutions.
- Working knowledge of mainstream Firewall technologies.
- Specific experience with ISO 27k.
- Knowledge of industrial domain security related to manufacturing facilities.
- Excellent communication skills.
- Customer service and continuous improvement mindset.
- Technical Writing Skills (Specifically related to IS projects).
- Teamwork.
- Ability to concurrently project manage a diverse list of items. Able to collect and translate business requirements.
- Flexibility, ability to change focus and adapt to changing corporate priorities.
- Time Management skills.
CERTIFICATIONS
Must have a recognized University degree, preferred in Computer Engineering, Computer Science, Industrial Engineering.
CISSP, CISM, or equivalent specialized training.
Security accreditations in the following areas is an asset (AWS, Cisco, Microsoft, etc).
Additional Preferred Skills:
Degree in Engineering or Science preferred.
Experience in Aerospace & Defense.
Bi-lingual, ability to communicate in English and French.
J-18808-Ljbffr