Job description

a)Develop, implement, and maintain the Information Security Management System (ISMS) in

compliance with EASA Part-IS requirements.

b) Coordinate and monitor compliance with EASA Part-IS for all relevant domains (Part-145, Part-

CAMO, Part-21, Part-OPS, etc.).

c) Conduct risk assessments related to information security threats, including cybersecurity risks,

and maintain the security risk register.

d) Communicate with the competent authorities and relevant parties on establishing the information

security compliance.

e) Lead internal audits, vulnerability assessments, and gap analyses to identify deficiencies and

improvement opportunities in ISMS.

f) Collaborate with IT, Safety, and Quality departments to integrate security controls into existing

processes.

g) Ensure effective incident response and recovery procedures are in place for information security

breaches or attempted attacks.

h) Provide training and awareness programs for staff on information security best practices and

regulatory obligations.

i) Monitor evolving EASA guidance, cybersecurity threats, and industry best practices to ensure

continuous compliance and risk mitigation.

j) Document policies, procedures, and reports as part of the ISMS and ensure proper version control

and availability.

a)Degree in Information Security, Computer Science, Aviation safety etc.

b) Experienced in information security or regulatory compliance in the aviation or critical infrastructure

sector.

c) Strong understanding of EASA regulatory framework, particularly Part-IS, Part-145, Part-CAMO,

or related domains.

d) Familiarity with international information security standards (e.g., ISO/IEC 27001).

e) Knowledge of risk management, incident response, and business continuity in aviation.

f) Experience in cybersecurity tools, systems, and practices.

g) Excellent communication and project management skills.