Cybersecurity Engineer – ISMS & Risk Management

About the role

Join an international team supporting a long‑running Information Security Management System (ISMS) programme for a major European space client. You will contribute to ISMS implementation, continuous improvement, risk management and compliance with international standards and sector‑specific frameworks.

Key responsibilities

• Support national and international ISMS implementations, risk assessments and compliance reviews.
• Conduct internal and external audits and design remediation strategies to meet regulatory requirements.
• Ensure alignment with ISO/IEC 27001, ISO/IEC 27005, GDPR, PCI DSS and other relevant standards.
• Collaborate with stakeholders to produce clear documentation and communicate security findings.

Required profile

• Strong knowledge of ISO/IEC 27001 and information security management systems.
• Understanding of ISO/IEC 27005 risk assessment methodology.
• Excellent written and verbal communication skills in English.
• Relevant certifications such as ISO/IEC 27001 Foundation or Lead Implementer are a plus.

Required skills

• ISO/IEC 27001
• ISO/IEC 27005
• GDPR compliance
• OSINT and threat intelligence gathering
• Ethical hacking, vulnerability assessment and penetration testing
• Cyber incident management, response and recovery
• DevSecOps and secure software development practices
• Business continuity planning (ISO 22301)
• PCI DSS compliance

What we offer

• Hybrid working model with up to 8 weeks of teleworking per year.
• Flexible start/finish times and intensive Fridays in summer.
• Personalized career development, training and language‑learning support.
• National and international mobility, including relocation assistance.
• Competitive compensation, wellbeing programme and health, dental and accident insurance.
• Commitment to equal opportunities, inclusion and diversity.