Intern in the ESA Security Office - Cyber Internal Audit Section

As an Intern in the ESA Security Office - Cyber Internal Audit Section, you will have the following tasks:

• Location: ESTEC, Noordwijk, Netherlands
• Workplace: Noordwijk, NL
• Type of appointment: Intern

Our team and mission

In the ESA Security Office, the Cybersecurity Industrial Audits play a major role in the security assurance process, contributing to the cybersecurity risk management associated to the organisation and infrastructure that the directorates deliver to their customers. The Cybersecurity Industrial Audits are part of the ESA Security Policy.

Field(s) of activity for the internship

• contributing to the security assurance process and cybersecurity risk management for ESA's programmes under the European Space Security Policy;
• researching and analysing emerging Artificial Intelligence (AI) cybersecurity frameworks (such as FAICP, ISO/IEC 42001:2023, and NIST AI RMF);
• contributing to the analysis and design of integration solutions with the current Cyber Internal Audit Framework used across the supply chain of the ESA programs.

Learning areas:

• ESA Cyber Internal Audit Framework;
• Cybersecurity Frameworks such as NIST, FACIP, SSDF, BSA or Secure Control Framework;
• Cybersecurity International Standards such as ISO27K series, ISO22301or ISO31K;
• Cybersecurity Guides and Guidelines such as OWASP, the CMMC or the Cloud Control Matrix;
• auditing standards and guidelines from ISACA or the IIA.

Behavioural competencies

Result Orientation
Operational EfficiencyFostering CooperationRelationship ManagementContinuous ImprovementForward Thinking

Education

You must be a university student, preferably in your final or second-to-last year of university course at Master's level. In addition, you must be able to prove that you will be enrolled at your university for the entire duration of the internship.

Additional requirements

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another ESA Member State language is an asset.

Basic knowledge or training in information security and auditing aspects will be considered as an asset.

Knowledge of software development is considered as an asset.

During the recruitment process, the Agency may request applicants to undergo selection tests.

Nationality

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, and the United Kingdom. Applicants from Canada as a Cooperating State can apply as well as those from Bulgaria, Croatia and Malta as European Cooperating States (ECS).