- Company Name
- ESSP SAS
- Job Title
- Security Evolutions Team Manager
- Job Description
-
**Job Title:**
Security Evolutions Team Manager
**Role Summary:**
Lead and manage the Security Evolutions Team to deliver high‑quality security architecture, governance, compliance, and risk‑analysis solutions supporting ESSP’s communication, navigation, and surveillance services. Act as a security specialist and key member of the enterprise security function, embedding risk‑aware practices across projects, operations, and third‑party engagements.
**Expectations:**
- Minimum 5 years experience in operational IT security, SOC operations, or cyber‑crisis management within space, aviation, or industrial sectors.
- Proven team‑leadership experience.
- Strong English proficiency (minimum B2).
- Demonstrated ability to drive risk‑based decision making, stakeholder collaboration, and change management.
**Key Responsibilities:**
*Team Management*
- Organize and lead the Security Evolutions Team; ensure delivery of risk assessments, security architectures, and compliance reports.
- Identify training needs; maintain team expertise in risk‑assessment methodologies, governance, and compliance.
- Ensure deliverables meet regulatory requirements and organizational objectives.
*Security Specialist*
- Design and optimize security architectures aligned with business goals and compliance frameworks (ISO 27001, NIST, GDPR, etc.).
- Conduct qualitative/quantitative risk assessments, threat modeling, and risk treatment planning.
- Develop and enforce security policies, standards, and controls; perform control assessments and gap analyses.
- Lead third‑party risk evaluations, vendor assessments, and contract reviews.
- Provide risk context and architectural guidance during incident response.
*Enterprise Security Contributor*
- Identify and escalate security risks in projects and operations.
- Participate in change management, evaluating security implications of new technologies.
- Support enterprise risk management and continuous improvement initiatives.
**Required Skills:**
- Team leadership, project & time management, stakeholder communication.
- Strong analytical, problem‑solving, and critical‑thinking abilities.
- Security Risk Analysis (qualitative/quantitative, threat modeling, risk treatment).
- Security Architecture design for systems, networks, and applications.
- Security Governance and compliance (ISO 27001, NIST, GDPR).
- Third‑party risk management and vendor assessments.
- Incident response support with risk context.
- Preferred knowledge: Cloud security (AWS, Azure, GCP), Zero Trust, DevSecOps, IAM, secure SDLC.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).
- Relevant security certifications (e.g., CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, CompTIA Security+).