Atr - Cybersecurity Manager / Isms Officer

**_About us _**

ATR is the **world's number one aircraft manufacturer in regional aviation**providing a new generation of turboprops. We are a joint venture between **two European aeronautical heavyweights, Airbus and Leonardo.**

From the world’s largest cities, to our planet’s most remote regions **, our purpose is to deliver air travel**to people, communities and businesses in an **innovative, sustainable and modern way.**

If you strive for excellence, are driven by **ambition**, **trust**and **respect**as we are, then get your career off to a flighting start with ATR

**Our leadership profile**:
**People Centric Entrepreneurial Inspiring Exemplary Innovative Humble**

**At ATR y**ou will work with passionate colleagues to make a difference in a human size company with attractive advantages**

We are looking for a **Cybersecurity Manager / ISMS Officer**to come onboard in our **CISO and Future developments**Directorate**in **Pierre**’s team : a team of **10**collaborators

**[Career Path**:_Project management] _**

**_Your Mission _**

**Job Purpose**

The ISMS Officer/Deputy CISO supports the Chief Information Security Officer (CISO) in implementing, operating, and continuously improving ATR’s Information Security Management System (ISMS) in compliance with Part-IS (EU 2022/1645 and EU 2023/203), ISO/IEC 27001 standards, and applicable cyber-regulatory frameworks (NIS2, GDPR, EU data Act, PART-IA etc). This role ensures the alignment of information security with aviation safety requirements orchestrating resources, suppliers, and activities to deliver secure and compliant operations.

**Key Responsibilities**

**Governance and compliance**:
Ensure ATR’s ISMS is maintained in line with EASA Part-IS requirements and ISO/IEC 27001 standards.

Act as the focal point for regulatory authorities (EASA, OSAC, DSAC) and ensure readiness for audits and inspections.

Lead the ISMS cycle: policy definition, risk assessment, incident response, compliance monitoring, and continuous improvement.

Oversee ISMS documentation, evidence, and KPIs; report to the Information Security Review Board (ISRB).

Deputize the CISO in decision-making, budget preparation, board reporting, and external representation.

Ensure alignment between information security and aviation safety requirements.

Manage compliance with broader cybersecurity regulations beyond Part-IS (e.g., NIS2, GDPR, EU Data Act where applicable).

**Operational and resource management**:
Identify proper allocation of resources (personnel, budget) to perform activities

Manage external resources and monitor workload to guarantee timely and cost controlled execution of all ISMS related activities

Define, review and maintain resource planning and training requirement for ISMS personnel

Follow and monitor the allocated budget, ensuring accurate tracking of expenditures

Define and update the Operating Plan (OP) for ISMS and cybersecurity activities, aligned with ATR’s strategic and financial planning

Orchestrate interdependent activities across teams and suppliers to ensure consistency, alignment, and efficiency in ISMS implementation

Manage relationship with SMS officers

Establish a security-by-design framework to strengthen cybersecurity across ATR’s ongoing and future projects.
Implement a comprehensive data management approach, including the development of a structured data model and taxonomy, and define the associated security requirements.

**Procurement and suppliers management**:
Identify needs in terms of tools, services, and external support required for ISMS and cybersecurity activities

Translate needs into detailed work specifications

Manage the end-to-end procurement process: supplier selection, request for quotation, evaluation, and recommendation

Launch purchase orders and ensure follow-up until delivery

Ensure a good receipt of services upon completion of the activity, ensuring compliance with expected requirements (on time and on quality)

Ensure Part-IS and cybersecurity requirements are properly integrated into procurement processes and contractual clauses

Support the Supplier Management Department in cascading ATR’s requirements to third parties

Propose and contribute to “Make/Buy” strategies and oversee supplier performance in relation to cybersecurity and compliance

**Awareness, Communication and Cyber Culture**:
Coordinate and deliver cybersecurity awareness and trainings

Design and Launch internal communication campaigns strengthen knowledge and understanding of cybersecurity practices at all organizational levels

Develop change management initiatives to reinforce adoption of security practices.

Promote information security as a key enabler of safety

**Cyber Resilience**:
Keep the organization informed and prepared for new and emerging cybersecurity regulations related to information security and data governance

Ensure ATR's resilience to cyber incidents through incident response and business continuity plans

**_About yo