Chief Information Security Officer

As the Chief Information Security Officer (CISO) for the Actuation GBU/subsidiary, you play a central role in safeguarding the integrity, confidentiality, and availability of all Information Systems (IS) across the GBU's sites. You report hierarchically to the CISO of Safran Electronics & Defense and functionally to the Actuation GBU IT Department.

You are responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints):

• Safran Information System Security Policy
• NCSC Cyber Assessment Framework
• France IGI 1300
• Export Control, ITAR, and related regulatory requirements

Key Responsibilities

1. Governance & Compliance
   • Oversee and monitor accreditation and approval processes for all local IS within your scope.
   • Ensure compliance with Safran ISS policies and all relevant national and international regulations.
   • Contribute to defining security objectives and requirements for IS across the GBU.
   • Develop, implement, and maintain IS security procedures.
   • Conduct audits and continuous monitoring to ensure adherence to ISS rules.
   • Monitor local enforcement of applicable data protection and regulatory requirements.
2. Security Expertise & Project Support
   • Provide ISS expertise and support for GBU IT projects, including Secure‑by‑Design practices.
   • Support Industrial Management teams in securing operational and industrial environments.
   • Act as the primary ISS point of contact for local authorities and external contractors.
3. Awareness, Training & User Engagement
   • Advise, inform, and raise awareness among users on ISS best practices (encryption, removable media, travel procedures, etc.).
   • Deliver onboarding ISS training for newcomers and recurring awareness sessions for all staff.
   • Conduct targeted awareness sessions for newly authorized personnel or those renewing authorization.
4. Incident Response & Operational Security
   • Manage ISS alerts originating from Safran CERT/SOC and the SED ISS operational unit.
   • Handle alerts on administrator and user workstations, including first‑level forensic analysis, user interviews, and coordination with Local Support teams.
   • Escalate issues requiring clarification or broader company involvement to central ISS teams.

Candidate Profile

• Master's degree in cybersecurity, information systems, or a related field (or equivalent experience).
• Broad, versatile expertise in information systems security.
• Knowledge of British, US, French, or European regulations related to the protection of national defence information is a strong advantage.
• Excellent interpersonal and communication skills, with the ability to educate and influence stakeholders at all levels.
• Demonstrated availability, reliability, and strong team spirit.
• Comfortable working in an international, multi‑site environment with regular travel.