CCM Security & Personal Data Protection (PDP) Manager at Telespazio Belgium

Work set-up: 
Full Remote
Contract: 
Experience: 
Senior (5-10 years)
Work from: 

Offer summary

Qualifications:

Master's or PhD in Cybersecurity, Information Security, Engineering, or a related technical field., At least 5 years of professional experience in IT or space system security, including policy compliance and risk management., Experience in handling Personal Data Protection in accordance with European regulations and ESA frameworks., Strong technical understanding of IT/network and data security, with excellent risk assessment and coordination skills..

Key responsibilities:

  • Supervise and ensure compliance with security and personal data protection regulations across ESA missions.
  • Monitor security operations and lead risk management processes involving CCM entities.
  • Conduct security assessments, support certification activities, and review security deliverables.
  • Organize security risk review sessions and support incident response and mitigation efforts.

Job description

This position is fully remote and open to candidates based in the Netherlands, Belgium, or the Czech Republic.

Telespazio Belgium can count on almost 40 years of experience in the field of Space Operations Service & Engineering activities.

We provide a significant contribution to the most major Space programs of the European Space Agency. Our core business is to work on the ground to build bridges into space, contributing to the success of ambitious missions.

The European Space Agency is our biggest client and we provide highly qualified employees to many sites of ESA but mainly for ESTEC in the Netherlands, and we provide a permanent contract with great benefits, a good salary, a relocation package along with genuine support to our employees.

On behalf of the European Space Agency, we are looking for A highly skilled CCM Security & Personal Data Protection (PDP) Manager to work remotely in ESA.

What is expected from you:

The candidate shall support as the CCM Security & PDP Manager and he/she will be responsible for supervising, coordinating, and ensuring compliance with security requirements and personal data protection (PDP) regulations across the ESA Copernicus Contributing Missions (CCM) framework. You will support ESA in monitoring security operations of both the CCM RRD service and contracted data providers, leading risk management processes, conducting security assessments, and contributing to certification and reporting activities.

  • Ensure full alignment of the Support Service with ESA's security policies and PDP framework
  • Review security deliverables from CCM RRD and CCM data providers to ensure contractual and technical compliance.
  • Perform continuous assessments and flag deviations or non-conformities to ESA
  • Lead and iterate joint security risk assessments (SRA) involving ESA, CCM RRD, and data providers.
  • Maintain and update the CCM Security Risk Register using inputs from individual providers’ SRAs.
  • Monitor evolving security risks, mitigation actions, and track residual risk across the lifecycle
  • Coordinate technical responses in the event of a security incident involving any CCM entity.
  • Support and advise the EOP-G Project/System Security Officer (PSSO) in investigations and mitigation efforts.
  • Run periodic security risk review sessions and support implementation of risk treatment plans
  • Assist ESA in preparing for and delivering Security Certifications related to CCM services and data providers.
  • Validate technical implementation of personal data protection measures in compliance with ESA’s PDP framework.
  • Review implementation status of PDP and security requirements by Category-2 and Category-3 CCM entities.
  • Contribute to ESA-EC security reporting, documentation, and responses to audits.
  • Draft technical notes, recommendations, and summary reports on security and PDP topics.
  • Organise and deliver security awareness and training sessions for contractors and stakeholders, when requested

What is expected from you:

  • MSc or PhD Cybersecurity, Information Security, Engineering, or a relevant technical field.
  • Minimum 5 years of professional experience in IT or space system security, including policy compliance and risk management.
  • Experience in handling Personal Data Protection in accordance with European data protection regulations and ESA frameworks.
  • Familiarity with ISO/IEC 27001, GDPR, and ESA/EC security frameworks.
  • Proven ability to conduct risk assessments and manage security registers in complex, multi-actor environments.
  • Strong technical understanding of IT/network and data security.
  • Excellent risk assessment and coordination abilities.
  • Structured communicator with ability to produce high-quality documentation.
  • Confidentiality and integrity in handling sensitive information.
  • Fluency in English (written and spoken) required; additional EU languages are an asset

When:

Deadline to apply: ASAP

Please note that interviews will be held either via skype, webex, other digital platforms

We look forward to receiving your application for this position!

Required profile

Experience

Level of experience: Senior (5-10 years)
Spoken language(s):
English
Check out the description to know which languages are mandatory.

Other Skills

  • Client Confidentiality
  • Communication
  • Personal Integrity

Data Protection Manager Related jobs