ATR - Cybersecurity Manager / ISMS Officer (H/F) - AVIONS DE TRANSPORT REGIONAL (ATR) GIE

ATR - Cybersecurity Manager / ISMS Officer (H/F) - AVIONS DE TRANSPORT REGIONAL (ATR) GIEJoin to apply for the ATR - Cybersecurity Manager / ISMS Officer (H/F) role at AEROCONTACT.Job DescriptionAbout ATR: ATR is the world's number one aircraft manufacturer in regional aviation, providing a new generation of turboprops. We are a joint venture between Airbus and Leonardo. Our purpose is to deliver air travel to people, communities and businesses in an innovative, sustainable and modern way. We are looking for a Cybersecurity Manager / ISMS Officer to join our CISO and Future Developments Directorate in Pierre's team, a team of 10 collaborators. Career Path: Project management.Your Mission: The ISMS Officer/Deputy CISO supports the CISO in implementing, operating, and continuously improving ATR’s ISMS in compliance with Part-IS (EU 2022/1645 and EU 2023/203), ISO/IEC 27001, and applicable cyber-regulatory frameworks (NIS2, GDPR, EU Data Act, Part-IA, etc.). This role ensures the alignment of information security with aviation safety requirements by coordinating resources, suppliers, and activities to deliver secure and compliant operations.Key ResponsibilitiesGovernance and compliance: Ensure ATR’s ISMS is maintained in line with EASA Part-IS and ISO/IEC 27001. Act as the focal point for regulatory authorities (EASA, OSAC, DSAC) and ensure readiness for audits and inspections. Lead the ISMS cycle: policy definition, risk assessment, incident response, compliance monitoring, and continuous improvement. Oversee ISMS documentation, evidence, and KPIs; report to the Information Security Review Board (ISRB). Deputize the CISO in decision-making, budget preparation, and external representation. Ensure alignment between information security and aviation safety. Manage compliance with broader cybersecurity regulations beyond Part-IS (e.g., NIS2, GDPR, EU Data Act).Operational and resource management: Identify and allocate resources (personnel, budget). Manage external resources and monitor workload for timely and cost-controlled execution of ISMS activities. Define and maintain resource planning and training for ISMS personnel. Monitor budget and expenditures. Define/update the Operating Plan for ISMS and cybersecurity activities in alignment with ATR’s strategy. Coordinate interdependent activities across teams and suppliers. Manage the relationship with SMS Officers. Establish a security-by-design framework and implement a data management approach with a structured data model, taxonomy and security requirements.Procurement and suppliers management: Identify tool and service needs, translate into detailed work specifications, and manage end-to-end procurement (supplier selection, RFQ, evaluation, and recommendations). Launch POs and ensure delivery and acceptance. Ensure Part-IS and cybersecurity requirements are integrated into procurement processes and contractual clauses. Support Supplier Management in cascading ATR requirements to third parties. Contribute to make/buy strategies and monitor supplier performance in cybersecurity and compliance.Awareness, communication and cyber culture: Coordinate and deliver cybersecurity awareness and training. Design and launch internal communications to strengthen security practices. Promote change management to drive adoption of security practices. Position information security as a key enabler of safety.Cyber resilience: Keep the organization informed about new cybersecurity regulations and ensure ATR’s resilience to cyber incidents through incident response and business continuity plans.Profile / QualificationsProven experience in information security management, preferably in aviation or regulated industries.Knowledge of EASA Part-IS, ISO/IEC 27001, NIST CSF, and EU cyber regulations.Strong background in ISMS audits, compliance, and regulatory relations.Leadership, communication, and stakeholder management skills.Certifications (CISSP, CISM, ISO 27001 Lead Implementer/Auditor) desirable; Project Management certifications desirable.Team-oriented with ability to lead and solve problems.Fluent in English and French (Italian a plus).And above all, you are ready to take off with us to connect communities and businesses worldwide and provide the best possible products and support to our customers.Recruitment ProcessYou will be contacted by PierreInnovative and digital assessmentTo get to know you better: interview with Pierre, then with Mehdi (HR Recruiter)What We OfferHighly competitive compensation package (profit sharing, employee savings plan)Work-life balance (remote working, paid time off for family events)Well-being/health coverage (supplementary health & welfare)Career paths to develop skills and build a professional projectWide range of development programs for soft and hard skillsCSE: ATR and Airbus CSE programsDiversity and inclusion: ATR commits to workforce diversity and an inclusive environment. We welcome all applications regardless of background, age, gender, disability, sexual orientation or religious belief.About ATR (in French): ATR est le premier constructeur mondial d'avions régionaux et fait partie d'une filiale d'Airbus et Leonardo. Notre objectif est d'assurer le transport aérien de manière innovante, durable et moderne.Seniority levelExecutiveEmployment typeFull-timeJob functionInformation TechnologyIndustriesStaffing and RecruitingReferrals increase your chances of interviewing at AEROCONTACT. Get notified about new Cyber Security Manager jobs in Toulouse, Occitanie, France. #J-18808-Ljbffr