Position Summary

At Jet Aviation, we are driven by one purpose: enabling seamless, secure, and exceptional flight experiences for clients around the world. Cybersecurity and compliance are central to that mission. As we continue strengthening our global security posture, we are looking for a Cybersecurity Risk & Compliance Analyst who is passionate about safeguarding digital environments and building strong governance foundations.
If you thrive in a collaborative setting, enjoy bringing structure to complexity, and want to make a tangible impact on cybersecurity maturity across a global aviation business, this role is for you.

Your Mission

• Drive and enhance our Information Security Management System (ISMS) to ensure regulatory alignment and continuous improvement.
• Manage core compliance artifacts such as risk registers, control frameworks, policies, procedures, and audit evidence.
• Coordinate internal and external audits (EASA, ISO 27001, SOC 2) — from preparation to stakeholder engagement to evidence collection.
• Track and lead remediation activities, ensuring findings and risks are addressed in a timely and accountable manner.
• Develop and monitor KPIs to measure ISMS performance, audit readiness, and overall compliance health.
• Work cross functionally with engineering, operations, legal, and business teams to embed security and compliance into daily operations.
• Identify compliance gaps and proactively implement governance and process improvements.
• Support third party risk management, including vendor assessments and ongoing monitoring.
• Ensure documentation quality and audit readiness, maintaining accurate and centralized records
• Serve as a go to contact for compliance-related questions, helping teams navigate regulatory expectations and internal standards.

What we offer

• An exciting and challenging job in a dynamic environment.
• Various opportunities for professional and personal development.
• A truly multicultural team in a global company where diverse perspectives spark innovation
• A motivated and cheerful team that looks forward to working with you.
• Our events are great! We also have lots of fun together outside of working hours.

Minimum Requirements

• 3–5 years of experience in IT, cybersecurity, compliance, or GRC.
• At least Bachelor Degree in relevant field.
• Solid understanding of cybersecurity frameworks (ISO 27001, NIST SP 800 53, etc.).
• Experience supporting audits such as ISO 27001 or SOC 2, including evidence preparation and remediation tracking.
• Familiarity with third party risk management and vendor security assessments.
• Strong skills in maintaining compliance documentation (policies, procedures, ISMS artifacts).
• Excellent organizational abilities — able to manage multiple activities, deadlines, and stakeholders.
• Clear and effective communication skills for collaboration across technical and business teams.
• Proficiency in Microsoft Office for reporting, tracking, and documentation.
• Ability to analyze data and create meaningful compliance dashboards and reports.