Job
In this role, you will develop comprehensive cybersecurity strategies, conduct risk management, and oversee compliance with security standards across multiple sites in Germany to protect critical information systems.
Job summary
This listing has been machine translated. Show original
Job technologies
Your role in the team
- We are seeking a highly experienced and strategic Information System Security Officer to lead our cyber and regulatory compliance programs across RTX business units for sites located in Germany.
- The primary work location is Heidelberg.
- This role is critical to ensuring the cybersecurity posture of the sites and establishing the guidelines and actions needed to protect the company's information systems against cyber threats, address digital compliance risks, and foster a company-wide culture of cybersecurity.
- The successful candidate will provide technical leadership, oversee multi-site governance and risk management, and ensure alignment between RTX ES Cybersecurity services (including IT and OT) and business functions to safeguard critical assets, applications, systems, and data.
- The candidature is expected to follow a hybrid work model, balancing remote and on-site presence based on business needs, key meetings, critical milestones, team collaboration needs, audits or incident response requirements.
- Ensure the management and local cyber governance of the Information Systems within the sites under ISSO scope.
- Ensure adherence to global and regional/local regulatory requirements and applicable frameworks (ISO 27001, 27005, NIST SP800-171, etc.).
- Maintain the Information Security Management System (ISMS) or equivalent governance model.
- Define, implement, coordinate, manage and monitor activities related to the Part-IS regulation (acting as Aviation Safety ISMS Manager).
- Drive internal and external audits, certifications, and compliance readiness across multiple sites.
- Continuous monitoring of emerging regulations and standards, ensuring proactive compliance and risk management.
- Ensure relationships and interfaces with cyber stakeholders across the site ecosystem, including security authorities, customers, and partners.
- Define, derive and maintain security policies, procedures and guidance for Restricted and Classified IS located on site (if any), and ensure their implementation with the support of the DT team.
- Ensure accreditation activities on Restricted and Classified networks (when applicable).
- Develop and execute an annual security awareness plan to reduce business compliance risks and cyber operational risks, and to foster a cyber culture across the sites.
- Manage cyber risks (identification, assessment, and treatment) in accordance with the applicable enterprise-wide cyber risk program and regulations, including but not limited to Part-IS and NIS2.
- As part of risk management, the ISSO will conduct/lead risk assessments for the sites and develop associated risk treatment plans with support from the DT Int'l Operations and RTX Global GRC teams.
- Oversee implementation of security controls (technical, administrative, physical) for applications, infrastructure, Cloud, and OT systems under ISSO scope.
- Ensure secure enablement of new technologies and digital transformation programs.
- Ensure compliance with applicable security requirements for the sites (internal policies, applicable regulations and customer frameworks).
- Ensure compliance with applicable security requirements for the third parties engaged with the sites (internal policies, applicable regulations and customer frameworks).
- Drive supplier cyber risks identification and treatment for the sites.
- Support the enterprise-wide compliance program (e.g., DT Assessment, Part-IS internal audit) and external audits/assessments by customers and regulators (e.g., CASE audit).
- Ensure that the threat detection capabilities provided by the RTX Cyber-Defense team are fully implemented.
- Monitor, detect, and respond to cyber threats targeting Restricted and Classified networks (when applicable).
- Support the RTX Cyber-Defense Operations for any event or incident occurring on the sites.
- Drive incident response preparedness and act as point of contact for security incidents.
- Provide expert security guidance to DT Int'l Operations (e.g., vulnerability management, remediation plan execution, support on new cyber programs).
- Support special cyber programs such as SURGE and drive the remediation of critical vulnerabilities in support of DT Int'l operations and the CART team.
- Champion business resilience by aligning DT and OT security strategies with business continuity and disaster recovery plans.
- Provide support to the DT team on activities related to business continuity and recovery (BIA, DRP, etc.).
- Act as the point of contact for various compliance programs (e.g., EASA Part-IS, NIS2, DFARS CMMC Global, etc.) where applicable.
- Provide expert security guidance to Engineering, Operations, and Value Stream Leaders teams.
- Especially, the ISSO will provide support to business programs and pursuits.
- Collaborate with local stakeholders (e.g., Engineering, Operations, Safety, Quality) to ensure seamless integration of information security requirements.
- Represent Information Security with external regulators, customers, and partners.
- Monitor regulatory, threat landscape and technology evolution in cybersecurity.
- Mentor and develop junior security professionals, promoting a cybersecurity culture.
Our expectations of you
Education
- Master's degree in Computer Science, Information Security, Engineering, or a related field, with 8+ years of experience in cybersecurity.
Qualifications
- Strong working knowledge of security frameworks: ISO 27001, 27005, NIST (CSF, SP 800-171, SP 800-82), etc.
- Excellent knowledge of risk management methodologies and audit practices.
- Strong communication and stakeholder management skills at C-level.
- Relevant certifications (one or more): CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, ISO 27005 Risk Manager, OSCP, CEH, GIAC, etc.
- Fluency in German (spoken and written) and strong professional proficiency in English.
- Knowledge of EASA Part-IS, NIS2, and national Ministry of Defence security regulations.
- Familiarity with Industrial Control Systems (ICS) / OT cybersecurity.
- Background in safety-critical or regulated environments.
- Demonstrate ownership and accountability for assigned projects/programs.
- Curious, passionate.
- Ability to withstand pressure.
- Ability to work across the organization.
- Ability to influence.
- Ability to report back to management.
- Team management.
- Sense of the common good and commitment.
Experience
- Knowledge or experience in at least five of the following domains: Risk Management, Security Architecture & Engineering, Asset Security, Communication & Network Security, Security Assessment and Testing, IAM, Security Operations.
- Experience leading multi-site/global compliance programs.
- Experience in regulated industries (e.g., aerospace, defence, manufacturing, or critical infrastructure).
- Experience working with or for regulators/authorities or customers (e.g., aerospace and defense OEMs).
- Experience and expertise in the following security fields: threat monitoring and detection, security incident management, penetration testing and/or technical audits, and software development security (threat modeling, secure coding).
What we offer
- Join our international team
- Flexible working hours
- 30 days of vacation
- Industry-specific pay
- Company-sponsored pension plan
- Corporate health management
- Internal and external training opportunities to promote the continuous learning and development of our employees
- Global career opportunities at over 300 sites worldwide
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Collins Aerospace specializes in aerostructures, avionics, interiors, mechanical systems, mission systems, and power and control systems that serve customers across the commercial, regional, business aviation and military sectors. Headquartered in Charlotte, North Carolina, the business has 78,000 employees across more than 300 locations of four businesses that form Raytheon Technologies Corporation.
- 50-249 Employees
- Established Company
- Onsite, Hybrid
- Industry, Production · Aviation, Space Travel
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
