Cybersecurity & Human Factors SME

The Cybersecurity & Human Factors SME will provide senior subject-matter expertise across cybersecurity and human factors disciplines for aviation systems and operational environments, ensuring that cybersecurity, operational resilience, usability, human performance, and safety-critical design principles are effectively integrated into ATM systems, operational procedures, and transition activities.

Key Responsibilities

• Lead cybersecurity and human factors advisory activities across ATM modernization, operational readiness, and transition programs.
• Review ATM systems, operational procedures, HMIs, CWPs, digital platforms, and operational workflows from cybersecurity and human factors perspectives.
• Support cybersecurity risk assessments, vulnerability reviews, access-control evaluations, system hardening, and operational resilience activities.
• Assess human performance risks including workload, situational awareness, usability, fatigue, procedural complexity, and operational error potential.
• Develop and maintain cybersecurity and human factors requirements, assurance evidence, risk assessments, and mitigation plans.
• Support operational trials, simulations, training validation, readiness exercises, and emergency response activities.
• Coordinate with engineering, operations, safety, regulatory, V&V, IT/OT security, suppliers, and operational stakeholders.
• Report cybersecurity and human factors risks, dependencies, and readiness status to program governance forums.
• Support compliance with ICAO cybersecurity frameworks, aviation safety requirements, and applicable ergonomic standards such as ISO 11064.

Specific Requirements
Required Qualifications

• Bachelor’s Degree in:

  • Cybersecurity
  • Information Security
  • Human Factors
  • Ergonomics
  • Systems Engineering
  • Computer Science
  • Engineering
  • or related discipline.

• Professional certifications such as CISSP, CISM, CRISC, ISO 27001, Human Factors certification, or equivalent are desirable.

Required Experience

• Minimum 10–15 years of experience in:
  • Aviation systems
  • ATM/CNS environments
  • Cybersecurity
  • OT security
  • Human factors
  • Safety-critical systems
  • Regulated operational environments.
• Experience assessing cybersecurity and human performance risks within operational aviation environments.
• Experience working with regulators, suppliers, operational stakeholders, and technical delivery teams.