Description

The ESA Cyber Security and INFOSEC Manager is in the ESO Corporate Security Assurance Management Office, ESA Security Office, Directorate of Resources and Services.

Reporting to the Head of the ESO Corporate Security Assurance Management Office, you will be responsible for leading all activities related to the cyber security assurance of ESA corporate and directorate systems in accordance with the requirements of the ESA Security Directives. You will, in addition, be responsible for the coordination of a dedicated team supporting cyber security, system certification and accreditation activities. You will carry out your duties in coordination with the relevant representatives of the various ESA directorates, and in synergy with the lnfosec Panel Member State representatives.

Duties

The ESA Cyber Security and INFOSEC Manager's tasks and responsibilities will include:

• the coordination and management of all ESA Corporate and Directorate Cyber Security Audits;
• the regular review and updating of the ESA Cyber Security Policy;
• supervising correct ESA-wide implementation of the ESA Security Regulations and Directives in the domains of communications and information systems and security accreditation and certification policy and procedures;
• ensuring the correct ESA-wide implementation of the Information Protection Policy and Directive;
• supporting activities to be presented before the ESA Member State lnfosec Panel and before the Industrial Security Panel.

Your duties will be performed coordinating a dedicated team within ESO and with the support of specialised industry.

In particular:

• managing the future Cyber Ramp-Up Security Assurance programme;
• maintaining and executing a programme of cyber security governance audits and technical assessments for corporate and directorate systems in line with a Council-approved ESA Security Master Plan;
• supporting the delivery of operational and strategic level cyber threat landscape and intelligence reports;
• management and execution of lnfosec certification and accreditation activities for unclassified and classified networks, systems and applications at corporate and directorate level;
• independently evaluating security dossiers and drafting formal certification and accreditation statements for approval by the ESA Security Accreditation Authority;
• defining and maintaining security policy and process guidelines in support of information protection, certification and accreditation processes and baseline security assurance specifications in response to an evolving cyber security threat landscape;
• supporting corporate and directorate programme and system security risk assessments and delivering risk appraisal recommendations for approval by the ESA Security Accreditation Authority;
• supporting, in full coordination with CSOC Operations and ESACERT, cyber incident notification, containment, eradication, recovery, remediation and reporting activities;
• delivering security training programmes, briefings and awareness sessions in the domains of INFOSEC (COMSEC, ITSEC, CYBERSEC), information protection, security risk and business continuity management;
• supporting the establishment, evolution and continuous improvement of an ESA-wide Cyber Security Maturity Model programme;
• supporting the definition of classified procurement packages including Programme Security Instructions and Security Classification Guides.

You will also be responsible for identifying, assessing, managing and reporting the health and safety risks in your area of responsibility.

Technical competencies

Behavioural competencies

Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking

For more information, please refer to the ESA Core Behavioural Competencies guidebook 

Education and professional experience

A master's in engineering, computer science, or cyber security is required for this post together with, in principle, 4 years of relevant professional experience. Alternatively, candidates with a bachelor's degree, complemented by an additional four (4) years of relevant professional experience may be considered.

Additional requirements

• The potential to manage individuals or a team of experts;
• The ability to organise their activities and ensure a motivating work environment;
• Strong leadership capabilities, with proven relationship management and communication skills;
• The ability to drive your team's performance, developing your people by encouraging learning, delegating responsibility and giving regular and constructive feedback;
• Strong problem-solving skills to deal with day-to-day operational challenges, together with demonstrated planning and organisational skills;
• Strong result orientation with the ability to set priorities and present practical solutions both orally and in writing;
• The ability to manage challenging situations proactively and constructively and to be customer-focused.
• People management experience is an asset, as is international experience, i.e. outside your home country, as well as experience in diverse functional areas relevant to ESA activities.

• Excellent organisational and stakeholder management skills;
• Willingness to travel;
• International experience including interfacing with international and intergovernmental organisations’ security frameworks or national security authorities;
• Professional certifications in cyber security would be an asset.