Cyber Security Governance and Assurance Lead

About the role

Avia Solutions Group is seeking a Cyber Security Governance and Assurance Lead to drive security governance across its global aviation operations. The role will own the security awareness program, third‑party risk management, application security governance and ensure compliance with ISO 27001, NIS2 and other regulatory requirements.

Key responsibilities

• Lead the organization‑wide Cybersecurity Awareness and Training Program, including phishing simulations and role‑based training.
• Establish and manage the Third‑Party Risk Management Program, covering vendor assessments, onboarding reviews and continuous monitoring.
• Oversee Application Security Governance, ensuring secure development requirements, testing processes and remediation tracking.
• Maintain group‑wide compliance with information security, privacy and regulatory standards such as ISO 27001 and NIS2.
• Develop, maintain and improve information security policies, standards, procedures and governance frameworks.
• Coordinate security risk assessments and report findings to executive leadership.
• Manage internal and external security audits, regulatory inspections and ensure timely remediation.
• Define and report security metrics, KPIs and provide regular updates to governance committees.

Required profile

• Minimum 4 years of experience in cybersecurity, information security or IT risk governance.
• Proven experience developing and maintaining security policies, standards and governance frameworks.
• Demonstrated ability to collaborate with IT, legal, compliance, risk and business units in a multi‑entity organization.
• Experience leading cybersecurity projects and delivering them on time.
• Track record of organizing and leading internal and external security audits with timely remediation.
• Team management experience and excellent verbal and written communication skills.

Required skills

• ISO 27001 (implementation, auditing and compliance).
• NIS2 regulatory knowledge.
• CISM certification (preferred).
• CISSP certification (preferred).
• CompTIA Security+ certification (preferred).
• ISO/IEC 27001 Lead Auditor or Lead Implementer certification (preferred).

What we offer

• Vibrant international aviation environment with professional development and certification opportunities.
• Gym and yoga classes, children’s room, well‑being initiatives and health benefits.
• Parking or public transport tickets, electric‑car spots and discounts from partner companies.
• Salary starting from 5 500 EUR (including taxes) with potential range based on experience.