As the Chief Information Security Officer (CISO) for the Actuation GBU/subsidiary, you play a central role in safeguarding the integrity, confidentiality, and availability of all Information Systems (IS) across the GBU’s sites. You report hierarchically to the CISO of Safran Electronics & Defense and functionally to the Actuation GBU IT Department.
You are responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints):
- Safran Information System Security Policy
- NCSC Cyber Assessment Framework
- France IGI 1300
- Export Control, ITAR, and related regulatory requirements
Key Responsibilities
- Governance & Compliance
- Oversee and monitor accreditation and approval processes for all local IS within your scope.
- Ensure compliance with Safran ISS policies and all relevant national and international regulations.
- Contribute to defining security objectives and requirements for IS across the GBU.
- Develop, implement, and maintain IS security procedures.
- Conduct audits and continuous monitoring to ensure adherence to ISS rules.
- Monitor local enforcement of applicable data protection and regulatory requirements.
- Security Expertise & Project Support
- Provide ISS expertise and support for GBU IT projects, including Secure‑by‑Design practices.
- Support Industrial Management teams in securing operational and industrial environments.
- Act as the primary ISS point of contact for local authorities and external contractors.
- Awareness, Training & User Engagement
- Advise, inform, and raise awareness among users on ISS best practices (encryption, removable media, travel procedures, etc.).
- Deliver onboarding ISS training for newcomers and recurring awareness sessions for all staff.
- Conduct targeted awareness sessions for newly authorized personnel or those renewing authorization.
- Incident Response & Operational Security
- Manage ISS alerts originating from Safran CERT/SOC and the SED ISS operational unit.
- Handle alerts on administrator and user workstations, including first‑level forensic analysis, user interviews, and coordination with Local Support teams.
- Escalate issues requiring clarification or broader company involvement to central ISS teams.
Candidate Profile
- Master’s degree in cybersecurity, information systems, or a related field (or equivalent experience).
- Broad, versatile expertise in information systems security.
- Knowledge of British, US, French, or European regulations related to the protection of national defence information is a strong advantage.
- Excellent interpersonal and communication skills, with the ability to educate and influence stakeholders at all levels.
- Demonstrated availability, reliability, and strong team spirit.
- Comfortable working in an international, multi‑site environment with regular travel.
#J-18808-Ljbffr…
