Senior Information Technology Security Officer

Overall purpose: Ensure the protection of FAA’s digital and information assets. Monitor and safeguard the integrity, confidentiality, and availability of the Authority’s information systems. Support the development and implementation of robust information security policies, strategies, and controls, while ensuring compliance with relevant laws, regulations, and internal policies.Key accountabilities: Implement and manage FAA’s information security strategy, ensuring alignment with corporate goals and regulatory compliance.Develop and maintain security policies, procedures, and standards, in accordance with. international frameworks (e.g., ISR, ISO/IEC 27001, NIST).Conduct regular security risk assessments and audits to identify threats, vulnerabilities and areas for improvement; lead risk treatment planning..Manage and coordinate responses to information security incidents and breaches, including investigation, containment, recovery, and post-incident reviews.Ensure timely resolution of security incidents, applying lessons learned to strengthen security protocols.Monitor and ensure compliance with relevant laws, regulations, and best practices, including data protection laws.Assist in external audits and ensure FAA’s adherence to regulatory requirements in information security.Collaborate with the IT to ensure all systems are secure and that vulnerabilities are proactively addressed.Design and deliver information security training and awareness programs to promote a culture of cybersecurity across all staff and departments.Continuously monitor the organization’s information systems to detect and respond to threats in real-time.Prepare regular security reports for management and key stakeholders, outlining risks, incidents, and recommendations for improvement.Business Continuity and Disaster Recovery:Ensure the integration of information security within FAA’s business continuity and disaster recovery plans.Lead the development of contingency plans and the testing of these plans to ensure the Authority’s ability to recover from security incidents.Education: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.A Master’s degree is Preferred.Minimum Experience: 4-7 years of experience in information security or a related field, with proven expertise in risk management, incident response, and cybersecurity compliance.