Chief Information Security Officer (H/F) - GOODRICH ACTUATION SYSTEMS LIMITED (UK) - #187255

Safran est un groupe international de haute technologie opérant dans les domaines de l'aéronautique (propulsion, équipements et intérieurs), de l'espace et de la défense. Sa mission : contribuer durablement à un monde plus sûr, où le transport aérien devient toujours plus respectueux de l'environnement, plus confortable et plus accessible. Implanté sur tous les continents, le Groupe emploie 100 000 collaborateurs pour un chiffre d'affaires de 27,3 milliards d'euros en 2024, et occupe, seul ou en partenariat, des positions de premier plan mondial ou européen sur ses marchés. Safran est la 2ème entreprise du secteur aéronautique et défense du classement « World's Best Companies 2024 » du magazine TIME. Safran Electronics & Defense propose à ses clients des solutions d'intelligence embarquée leur permettant d'appréhender l'environnement, de réduire la charge mentale et de garantir une trajectoire, même en situation critique, ce dans tous les environnements : sur terre, en mer, dans le ciel ou l'espace. La société met les expertises de ses 13 000 collaborateurs au service de ces trois fonctions : observer, décider et guider, pour les marchés civils et militaires.

Mission description

As the Chief Information Security Officer (CISO) for the Actuation GBU/subsidiary, you play a central role in safeguarding the integrity, confidentiality, and availability of all Information Systems (IS) across the GBU's sites. You report hierarchically to the CISO of Safran Electronics & Defense and functionally to the Actuation GBU IT Department. You are responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints): • Safran Information System Security Policy • NCSC Cyber Assessment Framework • France IGI 1300 • Export Control, ITAR, and related regulatory requirements Key Responsibilities 1. Governance & Compliance • Oversee and monitor accreditation and approval processes for all local IS within your scope. • Ensure compliance with Safran ISS policies and all relevant national and international regulations. • Contribute to defining security objectives and requirements for IS across the GBU. • Develop, implement, and maintain IS security procedures. • Conduct audits and continuous monitoring to ensure adherence to ISS rules. • Monitor local enforcement of applicable data protection and regulatory requirements. 2. Security Expertise & Project Support • Provide ISS expertise and support for GBU IT projects, including Secure-by-Design practices. • Support Industrial Management teams in securing operational and industrial environments. • Act as the primary ISS point of contact for local authorities and external contractors. 3. Awareness, Training & User Engagement • Advise, inform, and raise awareness among users on ISS best practices (encryption, removable media, travel procedures, etc.). • Deliver onboarding ISS training for newcomers and recurring awareness sessions for all staff. • Conduct targeted awareness sessions for newly authorized personnel or those renewing authorization. 4. Incident Response & Operational Security • Manage ISS alerts originating from Safran CERT/SOC and the SED ISS operational unit. • Handle alerts on administrator and user workstations, including first-level forensic analysis, user interviews, and coordination with Local Support teams. • Escalate issues requiring clarification or broader company involvement to central ISS teams.

Candidate Profile • Master's degree in cybersecurity, information systems, or a related field (or equivalent experience). • Broad, versatile expertise in information systems security. • Knowledge of British, US, French, or European regulations related to the protection of national defence information is a strong advantage. • Excellent interpersonal and communication skills, with the ability to educate and influence stakeholders at all levels. • Demonstrated availability, reliability, and strong team spirit. • Comfortable working in an international, multi-site environment with regular travel.