Introduction

At Air France-KLM we use software & data a lot. The IT applications must be secure and the usage of data must be well protected and compliant with national and European laws and regulations. We are therefore looking for a new colleague, as a future Compliance Officer within the corporate information security office (CISO)! Your main role revolves around two questions: How do we protect the reputation and integrity of the Group IT and IT Airline organisations? And how do we keep our IT systems secure? Furthermore, risk analysis will be also part of your role.

What are you going to do?

You will work as an IT compliance / security specialist within a team of 25 security and compliance specialists.

Your main role will be to:

1.    Protect the reputation and integrity of the Group IT and IT Airline organisations by:

• Identifying all laws & regulations applicable to the IT organization, IT services and the AF/KL information systems, including those serviced/hosted by third parties,
• Controlling that the Group IT and IT Airline line management implements, maintains and supervises control measures to comply with laws & regulations,
• Building and maintaining an annual plan for internal and external audits to be performed within the Group IT and Airline IT organizations, to lead and coordinate in assessments / audits where applicable. 
• Identifying and monitoring risk and compliance-issues, based on a transversal, integrated view of the Group IT and Airline IT processes and activities.

2.    Develop, maintain and continuously improve an IT Framework for a Quality Management System / Integrated Management system (QMS / IMS) with which line management is empowered to achieve the targets of the Group IT and Airline IT organisations in a controlled manner. 

3.    Control that the compliance requirements of the Group and the AF & KLM Corporate Departments are taken into account in Group IT and Airline It organizations

4.    IT Risk analysis of applications and information to determine which security controls or mitigating security measures are required to keep data adequate protected are regularly performed

In summary:

• You are constantly informed of the latest or upcoming Dutch law and regulations;
• You will perform IT risk analysis;
• You are also a cyber/compliance/risk consultant for the different Air France & KLM domains and procurement.
   

Where do you land?

You will land in the CISO department of Air France-KLM, where you work closely with around 25 colleagues. Our team works with Agile in a so-called DEVOPS environment. Our office is at Schiphol-Rijk or Paris Charles de Gaulle. Some colleagues are in Toulouse: this means that you often participate in video conferences, or you will visit colleagues on location.

Your profile

You are a team player that has an eye for details. You are curious and  always ask an additional question to get things clear, are highly visible in the business domains and with excellent communication skills. You possess strategic knowledge of the various Air France & KLM components, as well as legal and technological affinity with the developments in your field. You can also advise well and lead discussions - within and outside of IT. Moreover, you are aware of the organization and you know exactly which question to ask when and to whom.

Furthermore you have and/or demonstrated:

-    A University degree
-    Experience with IT compliancy and audits;
-    Knowledge about EASA, Schrems2, EDPB, NIS
-    Experience with IT risk analysis
-    Experience with communication at different levels within the organization
-    A goal-oriented mentality
-    knowledge of IT architecture, Cloud, IoT and BYOD
-    Experience with methods such as Agile, Safe, Lean and Scrum;
-    Good skills of the Dutch and English language.