Digital Security Officer

Airbus is committed to providing reasonable accommodations as an Equal Opportunity Employer to applicants with disabilities. If you require assistance or an accommodation to complete your application, please contact us at USCareers@airbus.com

• Notice: Know Your Rights: Workplace Discrimination is Illegal
• Notice: Pay Transparency Nondiscrimination (English)
• Aviso: Transparencia en el Pago No Discriminacion (Spanish)

Job Description:

This role is contingent upon obtaining all necessary regulatory approvals and the successful closing of a transaction which will result in establishing a new Airbus Affiliate in Kinston, NC (the "Kinston Affiliate"). The Digital Security Officer

would be an employee of the Kinston Affiliate.

Job Summary:

The role would be primarily accountable for maintaining the cyber security risk down to an acceptable level for assets within the designated area of responsibility.

Primary Responsibilities:

Work closely with IM (Information Management),Operations, and the Industrial Maintenance teams to carry out enterprise-class service level, availability, integrity, and security of Information Technologies (IT) deployed on production machinery.

1. Digital Security Strategy, Operating Model, and Risk - 60%

• Enable business and transformation on Digital Security matters

• Define, implement and coordinate a cross asset (IT/Data, Industrial, Products & Services, and People & Workplace domain) Digital Security strategy

  • Ensure business projects undergo the appropriate Digital Security validation processes

  • Coordinate and facilitate Digital Security initiatives and programmes

  • Ensure implementation and operation of all Digital Security controls and solutions in compliance with Airbus Digital Security requirements.

  • Ensures compliance with Airbus global security framework and policies.

  • The Digital Security Officer is the primary point of contact for all Digital Security topics

  • Monitor and evaluate the Digital Security landscape, identifying vulnerabilities, related risks, and support implementation of remediation plans

• Drive a consistent overall planning, adherence and operating model of the Digital Security operations, derived from a transparent and shared business risk-based framework and priorities in collaboration with local IM, Industrial, Products & Services and People & Workplace representatives, where relevant

  • Ensure security incident reporting to the relevant Airbus stakeholders such as SOC, Crisis Management

  • Develop and deliver Executive level reporting of company wide cyber security risks and operations

  • Communicate to employees about Airbus Security Standards, requirement and way of working

  • Ensures compliance and adherence to National, International, and industry security standards

  • Monitor achievement of target risk objectives against budgets spent

• Represent respective Division CISO and coordinate accordingly for Divisional specific digital security topics in name of the legal entity

2. Financial resources - 10%

• Define entity digital security budgets and liaise with relevant stakeholders

• Manage and monitor associated digital security budgets within Corporate Security

  • Consolidate and coordinate local operational Digital Security budgets, and arbitrate on priorities

• Define and implement a local Digital Security Make or Buy strategy, Provide regular updates on budget consumption and/or changes per security assets to relevant stakeholders

3. Internal & external collaboration - 10%

• Engage in the Airbus CISO worldwide community

• Collaborate with local IT/Data, Industrial, Products & Services and People & Workplace representatives, where relevant on the following topics:

  • Share local Digital Security constraints, challenges, opportunities, best practices and needs with peers

  • Manage external communication and engage with internal teams and employees on Digital Security topics

  • Enhance Digital Security footprint by the means of publications, presentations, external engagements, etc.

  • Influence lobbies and contribute to drafting new national regulations and standards

4. Supplier Management and External Staffing - 10%

• Support any security external staffing requirements by performing the following:

  • Defining the statement of work and/or job profiles required

  • Interacting with suppliers to provide feedback on potential candidates

  • Selecting and onboarding candidates from service providers

  • Monitoring the performance of onboarded service providers and providing feedback to the service provider

  • Managing the budget for external staffing resources

5. Other duties as assigned - 10%

Education:

• Preferred: Master's Degree in Information Security or equivalent experience

• Required: Degree in Information Technology or an equivalent combination of education and experience

Licensure/Certifications:

• Preferred:

  • Certifications in the areas of Security, Cyber Security, or Information Technology. An example of this is Certified Information Systems Security Professional (CISSP).

Experience required:

• Preferred:

  • +10 year (not mandatory) of experience in management role

  • +10 year (not mandatory) of experience in cybersecurity

  • Aerospace and Defense background is a plus

Travel Required:

• Domestic and International travels ad-hoc 15%

Citizenship:

• Eligible for employment in the US

Clearance:

• None

Knowledge, Skills, Demonstrated Capabilities:

• Required:

  • Stakeholder Management

  • Planning and Strategic Management

  • Organization, Resources (headcounts and budget) Management

  • Communication and presentation skills

  • Security awareness & communication

  • Cybersecurity audit

  • Cybersecurity standards and applicable regulations

Communication Skills:

Required:

• Proficiency in written and spoken English

Preferred:

• Fluency in another language (French, German, and/or Spanish) is desirable.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.

Company:

Employment Type:

Experience Level:

Remote Type:

Job Family:

------

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported toemsom@airbus.com.