Head of the ESO Space Security Assurance Management Office

Location: Frascati

Location
ESRIN, Frascati, Italy or ESTEC, Noordwijk, Netherlands or ESA HQ, Paris, France

Description
Head of the ESO Space Security Assurance Management Office, ESA Security Office (ESO), Directorate of Resources and Services.

Reporting to the Head of the Security Office as Head of Space Programme Security Assurance, you will be responsible for managing the ESA Security Office activities related to security risk management, security assurance, certification and accreditation for space programmes (ESA, EU and Third Party), during their whole life cycle, in synergy with and in support of the ESA directorates concerned.

Duties
Your Tasks And Responsibilities Will Include The Following

For programmes under ESA’s responsibility, managing the full security accreditation/certification process for space programmes, up to the issuance of the accreditation/certification statement;

For programmes under a third party’s responsibility, managing the preparation of the accreditation/certification dossier, in close coordination with the relevant programme/project team, up to its submission and presentation to the third party’s Security Accreditation Authority/Board;

Ensuring coherence and harmonisation of accreditation strategies and processes for EU and Third‑Party Programmes/Projects with the applicable security frameworks, including the ESA Security Regulations, Directives and Strategy;

Managing the ESO Space Programme Security Assurance Team, providing matrix support to specific space programmes/projects in order to:

develop and maintain an independent, high‑level security risk analysis and threat assessment to assess the project’s security posture and residual risks;

perform independent security assurance engineering analyses to propose the baseline system security posture and the minimum set of security requirements;

define tailored security accreditation/certification strategies for each space project;

establish accreditation/certification plans, identifying design solutions and requirements subject to verification or audit;

conduct the overall accreditation/certification process;

supervise the correct development and implementation of security measures in compliance with applicable security requirements;

organise and perform audits and penetration tests to assess the project’s cybersecurity implementation level;

analyse any baseline deviations potentially impacting the system’s accreditation/certification;

review industry‑driven security architectures, designs, RFD/RFWs, and qualification status to provide system security impact assessments.

Interfacing with industry on all matters related to system and service security certification/accreditation, in coordination with the programme/project teams;

Supervising the implementation of cybersecurity strategies for each space programme and supporting the Head of ESO in all relevant security matters;

Defining an annual Space Programme Audit Plan for ESA space programmes/projects;

Supporting the Head of ESO in maintaining relationships with ESA Member States, EU institutions, and Security Authorities, ensuring coherence and harmonisation between EU and ESA accreditation processes;

Maintaining relationships with ESA directorates, also acting as the Security Assurance Matrix Provider, to ensure alignment between internal stakeholders’ security and programmatic requirements and the ESA security assurance process;

Reviewing security aspects of partnerships with third parties for the development of space programmes/projects/activities and related cooperative frameworks;

Supporting the Head of ESO in defining security‑related cooperation strategies and joint objectives with ESA Member States, the EU, and other third parties involved in security;

Maintaining up‑to‑date knowledge of space and security domains within Member States and European institutions to remain informed of developments relevant to ESA activities and programmes.

You will also be responsible for identifying, assessing, managing and reporting the health and safety risks in your area of responsibility.

Technical competencies

In-depth knowledge of ESA space programmes/projects and ESA internal processes

In-depth knowledge of…