Ομιλος Γεκ Τερνα / Gek Terna Group

Infrastructure, energy, waste management, real estate

Chief Information Security Officer

CybersecurityConfirmed live in the last 24 hours

Full-timeHeraklion, GreeceNo salary listed

About the Job

Requirements

A bachelor's degree in IT, Business Administration, Law, or a related discipline, or equivalent relevant professional experience.
A minimum of 5 years of experience in Information Security Governance, Risk & Compliance (GRC), cybersecurity risk management, compliance, or information systems auditing.
Demonstrated experience establishing, maintaining, or improving an ISO/IEC 27001-based Information Security Management System (ISMS).
Experience managing audits, regulatory assessments, and compliance programs.
A strong understanding of NIS2, GDPR security requirements, and enterprise security architecture across IT, cloud, and OT/ICS environments.
Experience within aviation, transport, critical infrastructure, or another highly regulated sector.
Familiarity with EASA Part-IS requirements.
Strategic thinking and business awareness.
Stakeholder management and communication skills.
Analytical and problem-solving capability.
Ability to translate complex technical risks into business decisions.
Integrity, independence, and discretion when handling sensitive or confidential information.

Responsibilities

Develop, implement, and maintain the Airport’s information security governance framework, policies, and procedures.
Establish and continuously improve an ISO/IEC 27001-aligned Information Security Management System (ISMS).
Lead security governance initiatives and promote a strong security culture across the organization.
Coordinate management reviews, governance reporting, audits, and certification activities.
Maintain the information security risk management methodology and risk register.
Facilitate risk assessments across business functions and critical systems.
Monitor mitigation plans and escalate significant residual risks.
Support operational resilience and business continuity initiatives.
Lead cybersecurity governance activities supporting aerodrome certification and continuous compliance with EASA requirements, particularly Part-IS.
Coordinate inspections, compliance reviews, evidence submissions, and closure of findings.
Ensure effective alignment between cybersecurity, aviation safety, and aviation security requirements.
Serve as the primary point of contact for information security matters with the Hellenic Civil Aviation Authority, National Cybersecurity Authority, EASA, and other relevant authorities.
Monitor compliance with NIS2, GDPR security obligations, aviation regulations, and contractual commitments.
Maintain the information-security obligations register and monitor relevant regulatory developments.
Coordinate regulatory submissions, audits, inspections, and follow-up actions.
Support supplier due diligence and third-party security risk management.

Desired Qualifications

A master's degree in IT, Cybersecurity, Risk Management, or a related discipline is considered a plus.
Professional certifications such as CISSP, CISM, or CRISC are considered an asset.

Chief Information Security Officer - CISO (based in Crete)

ΟΜΙΛΟΣ ΓΕΚ ΤΕΡΝΑ / GEK TERNA GROUP · Heraklion, Greece · Full-time · Posted 2026-10-08

Workplace: on_site

Department: INTERNATIONAL AIRPORT HERAKLION CRETE

Description

International Airport of Heraklion, Crete S.A. is currently looking for a:

Chief Information Security Officer – CISO (based in Crete)

Responsibilities

Develops, implements, and maintains the Airport’s information security governance framework, policies, and procedures
Establishes and continuously improves an ISO/IEC 27001-aligned Information Security Management System (ISMS)
Leads security governance initiatives and promotes a strong security culture across the organization
Coordinates management reviews, governance reporting, audits, and certification activities
Maintains the information security risk management methodology and risk register
Facilitates risk assessments across business functions and critical systems
Monitors mitigation plans and escalates significant residual risks
Supports operational resilience and business continuity initiatives
Leads cybersecurity governance activities supporting aerodrome certification and continuous compliance with EASA requirements, particularly Part-IS
Coordinates inspections, compliance reviews, evidence submissions, and closure of findings
Ensures effective alignment between cybersecurity, aviation safety, and aviation security requirements
Serves as the primary point of contact for information security matters with the Hellenic Civil Aviation Authority (HCAA), National Cybersecurity Authority, EASA, and other relevant authorities
Monitors compliance with NIS2, GDPR security obligations, aviation regulations, and contractual commitments
Maintains the information-security obligations register and monitors relevant regulatory developments
Coordinates regulatory submissions, audits, inspections, and follow-up actions
Supports supplier due diligence and third-party security risk management

Requirements

Bachelor’s degree in IT, Business Administration, Law, or a related discipline, or equivalent relevant professional experience
Master’s degree in IT, Cybersecurity, Risk Management or related discipline will be considered a plus
Minimum 5 years of experience in Information Security Governance, Risk & Compliance (GRC), cybersecurity risk management, compliance, or information systems auditing
Professional certifications (e.g. CISSP, CISM, CRISC) will be considered an asset
Demonstrated experience establishing, maintaining, or improving an ISO/IEC 27001-based ISMS
Experience managing audits, regulatory assessments, and compliance programs
Strong understanding of NIS2, GDPR security requirements and enterprise security architecture across IT, Cloud, OT/ICS environments
Experience within aviation, transport, critical infrastructure, or another highly regulated sector
Familiarity with EASA Part-IS requirements

Competencies

Strategic thinking and business awareness
Excellent stakeholder management and communication skills
Strong analytical and problem-solving capability
Ability to translate complex technical risks into business decisions
High integrity, independence, and discretion when handling sensitive or confidential information

Apply

Apply at ΟΜΙΛΟΣ ΓΕΚ ΤΕΡΝΑ / GEK TERNA GROUP

About the Company

Ομιλος Γεκ Τερνα / Gek Terna Group

Infrastructure, energy, waste management, real estate

GEK TERNA Group is a major Greek business group active in infrastructure, energy production, supply and trade, concessions, waste management, and real estate development and management. Its products are large-scale projects and services in these sectors, delivered through its numerous subsidiaries and partners; the company manages, builds, and operates infrastructure and energy facilities, handles concessions, and develops real estate while providing related services. The group differentiates itself by its size, breadth, and international footprint, with about 14,000 direct and indirect employees and a leading position in Greece across multiple sectors, plus a strong presence abroad. Its goal is to remain a top diversified group in its core industries, expanding its project portfolio and geographic reach while delivering integrated infrastructure, energy, environmental, and real estate solutions.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Athens, Greece
Founded: 1969

Recently Posted Jobs

Explore more opportunities at Ομιλος Γεκ Τερνα / Gek Terna Group

See more jobs