Job description
Description
Location: Europe/Luxembourg/Remote – Within ±2h of Luxembourg (CET/CEST)
Department: Information Technologies
Employment Type: Full-Time
We are seeking a proactive and security-focused Cloud Security & Compliance Engineer with experience in Microsoft Azure environments to strengthen our cloud security posture and ensure regulatory compliance in a mission-critical aviation context. This role is pivotal in safeguarding digital assets, supporting audit readiness, and aligning IT operations with evolving cybersecurity frameworks such as EASA, Part-IS, and NIS2. You will work at the intersection of cloud security, risk management, and regulatory governance. You will work in close collaboration with and report directly to the Head of IT, contributing to strategic initiatives and operational resilience.
Key Responsibilities :
Cybersecurity & Risk Management
Design, implement, and maintain security controls across Azure and hybrid environments, ensuring alignment with aviation cybersecurity standards.
Monitor and respond to security threats.
Conduct regular risk assessments, vulnerability scans, and penetration testing follow-ups.
Support incident response activities and post-incident reviews.
Compliance & Governance
Ensure IT systems and processes comply with EASA regulations, NIS2 Directive, and internal governance frameworks.
Maintain and improve IT compliance documentation, including policies, procedures, and audit trails.
Collaborate with internal audit, legal, and operational teams to support regulatory audits.
Promote a culture of security awareness through training and internal communication.
Cloud Security Operations
Support secure deployment and configuration of Azure services, with a focus on identity and access management, data protection, and network security.
Apply security-by-design principles in collaboration with DevOps and architecture teams.
Collaboration & Continuous Improvement
Act as a liaison between IT and Compliance teams to ensure cohesive security strategies.
Stay informed on emerging threats, regulatory changes, and best practices in cloud security and compliance.
Contribute to the development of security roadmaps and compliance maturity models.
Requirements
3–5 years of experience in cybersecurity, cloud security, or IT compliance roles.
Strong understanding of cloud security principles, regulatory frameworks, and risk management.
Hands-on experience with Microsoft Azure security tools and services.
Proficiency in scripting and automation for security operations.
Excellent command of English (spoken and written); French is a strong plus.
