Information Security Team Leader

As Information Security Team Leader, you will implement the ISO function, as defined in the ESA Security Directives, manage the HRE team of Project/System Security Officers (PSSOs) and Security Officers, and be responsible for all the security aspects of the Directorate. You will report operationally to the Terrae Novae Programme Manager and functionally to the ESA Security Office. This position is under the responsibility of the Human and Robotics Exploration Terra Novae Programme Manager.

The Directorate of Human and Robotic Exploration Programmes (HRE) is a programme directorate within the ESA matrix structure. Through a partnership between humans and robots, HRE is dedicated to exploring destinations in space where humans are already living and working — or will live and work in the future — for the purpose of scientific research, economic development, international cooperation and public inspiration.

Duties

Your tasks and responsibilities will include:

• Managing, coordinating and evaluating the Directorate PSSOs and Local Security Officers reporting to you;
• Coordinating the support provided to the Directorate from various stakeholders;
• Ensuring that security risk management is performed across the Directorate, in cooperation with the HRE Risk Coordinator, and reporting on a quarterly basis to HRE MT on the Directorate’s security risk posture;
• Ensuring the relevant HRE activities and assets are certified by the ESA Security Office;
• Supporting the ESA Security Office in the evolution of the ESA security policies, and organising regular coordination on HRE activities with the Office, as well as with the ESA Legal Services Department, industry and international partners;
• Establishing, running and maintaining a security, personal data protection and export control awareness programme for all HRE personnel, as well as updating the mandatory attendance records, in cooperation with other support directorates;
• Managing and maintaining the Directorate’s business continuity management processes;
• Ensuring the physical, information and cyber security of the Directorate with the direct support of the PSSOs and corporate services, in line with the Directorate’s business objectives;
• Defining and documenting the Directorate’s policy on the marking of HRE information in the form of the Security Marking Instruction in cooperation with ESA Export Control Authorities;
• Coordinating the development of a security marking equivalence matrix for unclassified information managed within ESA space programmes and projects;
• Identifying the security risk posture for approval by the security risk owner and recommending the security risk response, also for approval by the security risk owner;
• Ensuring, where necessary, that the PSSOs document and implement the security operating procedures across the Directorate, and ensuring the maintenance of the Directorate’s information security management system website;
• Investigating, reporting and containing any security breaches, vulnerabilities or anomalies in accordance with the Security Directives and policy on the management of security incidents within the Directorate, in cooperation with the ESA Security Office;
• Performing security inspections and audits of the Directorate, programme, projects and activities to ensure compliance with the ESA Security Directive as well as with agreements with international partners, and to ensure that the appropriate level of security is maintained.

You will also be responsible for identifying, assessing, managing and reporting the health and safety risks in your area of responsibility.

Technical competencies

• Expertise in system and cyber security management (ISO27001)
• Knowledge of flight and ground segment systems
• Knowledge of security systems and processes
• Demonstrated experience in business continuity management

Behavioural competencies

• Result Orientation
• Operational Efficiency
• Fostering Cooperation
• Relationship Management
• Continuous Improvement
• Forward Thinking

Education and professional experience

A master's degree in a relevant domain is required for this post together with four years of relevant professional experience.

Additional requirements

• Background experience in space industrial development;
• Understanding of configuration management systems and processes;
• The potential to manage individuals or a team of experts;
• The ability to organise their activities and ensure a motivating work environment;
• Strong leadership capabilities, with proven relationship management and communication skills;
• The ability to drive your team’s performance, developing your people by encouraging learning, delegating responsibility and giving regular and constructive feedback;
• Strong problem-solving skills to deal with day-to-day operational challenges, together with demonstrated planning and organisational skills;
• Strong results orientation with the ability to set priorities and present practical solutions both orally and in writing;
• The ability to manage challenging situations proactively and constructively and to be customer focused;
• People management experience would be an asset, as would international experience, i.e. outside your home country, as well as experience in diverse functional areas relevant to ESA activities.

Applicants must be eligible to access information, technology, and hardware which is subject to European or US export control and sanctions regulations.

Note that ESA is in the process of transitioning to a Matrix setup, which could lead to organisational changes affecting this position.

Nationality and Languages

Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Spain, Sweden, Switzerland, the United Kingdom and Canada, Cyprus, Latvia, Lithuania and Slovakia.

According to the ESA Convention, staff shall be recruited on the basis of their qualifications, taking into account an adequate distribution of posts among nationals of the Member States.

The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.