GRC Consultant

You want to discover or to deepen your knowledge of product security stakes issues; in particular, you will work on the latest release of European regulations. Define and implement required activities for product security in the frame of a Security Management System (ISMS like). Analyse of “Part-Is” regulation including associated requirements in order to define an appropriate compliance plan. Plan also the integration of the modifications in the business processes with regard to the evolution of product security and production means security (covering vulnerability management, security incident, and security risk). Interact with safety managers and the business process responsibles. Perform awareness sessions to staff and partners on security stakes and the impact of ISMS deployment in the field of their daily activities and tasks. Perform security risk evaluation and develop security strategy. Prepare steering committee meetings, and write the minutes of these meetings.

Responsibilities

Define and implement required activities for product security in the frame of a Security Management System (ISMS like); Analyse of “Part-Is” regulation including associated requirements in order to define an appropriate compliance plan; Plan also the integration of the modifications in the business processes with regard to the evolution of product security and production means security (covering vulnerability management, security incident, and security risk); Interact with safety managers and the business process responsibles; Perform awareness sessions to staff and partners on security stakes and the impact of ISMS deployment in the field of their daily activities and tasks; Perform security risk evaluation and develop security strategy; Prepare steering committee meetings, and write the minutes of these meetings

Requirements

Graduate from a big school or university; At least five years of experience; Strong knowledge of Information System Management System (ISMS); Strong knowledge of Product security (process as well as activities); Strong knowledge of Aeronautic; Ability to summarize and write high-quality documents; Ability to lead and facilitate meetings; Ability to help and guide customers make choice; Ability to demonstrate open mindset; Ability to analyse issues; Spanish native is mandatory; Advanced level in English is mandatory; Eligibility for Security clearance level; Awareness of any potential compliance risks and commitment to act with integrity

Nice to have

Specialisation in cybersecurity or Information Technology

Benefits

Flexible working arrangements