Aviation Cybersecurity Consultant

Result of Service- Develop aviation cybersecurity policy and implementation support documents.

Work Location Montréal, Canada.

Expected duration The selected consultant is expected to be employed within the period of 11 months from 1 September 2022 to 31 July 2023.

Duties and Responsibilities THE ORGANIZATIONAL SETTING

This consultancy is within the Aviation Security Policy (ASP) Section, Aviation Security and Facilitation (ASF), Air Transport Bureau (ATB). The section is responsible for policy development related to security of the international air transport system, including developing and updating Annex 17 – Aviation Security, managing the work programme of the Aviation Security (AVSEC) Panel and its working groups, managing the continued development of aviation security guidance material including Doc 8973 – Aviation Security Manual; and providing support to the Assembly, the Council, and the Aviation Security Committee (ASC).

The ASP Section is also responsible for policy development with regards aviation cybersecurity in international civil aviation, including supporting the ICAO Cybersecurity Panel and its Working Groups (Working Group on Cyber Threat and Risk, and Working Group on Cybersecurity Guidance Material), and developing aviation cybersecurity guidance material.

The incumbent reports to the Chief, ASP (C/ASP) section, with whom s/he consults on complex issues, and will closely cooperate with the Aviation Cybersecurity Officer in order to undertake the responsibilities of the position.

MAJOR DUTIES AND RESPONSIBILITIES

Function 1 (incl. Expected results) Develop aviation cybersecurity policy and implementation support documents, achieving results such as:

- Develop procedures for reporting cyber incidents including classification of cyber incidents/attacks (e.g. taxonomy); - Develop a policy for security by design as a basis for the secure life-cycle of civil aviation systems; - Develop guidance material on cybersecurity information sharing between relevant stakeholders; - Develop guidance material and best practices on cybersecurity incident response and recovery, including emergency response planning, crisis management, and recovery plans, while leveraging existing emergency response and crisis management practices in civil aviation; - Review ICAO Global Plans (Global Air Navigation Plan, Global Aviation Safety Plan, and Global Aviation Security Plan), and identify aviation cybersecurity elements to be included in each plan; - Support the discussions within ICAO related to auditing Standard 4.9.1 in Annex 17 – Aviation Security;

Function 2 (incl. Expected results) Performs other related duties, as assigned.

Qualifications/special skills Academic Qualifications:

An advanced university degree in a field related to aviation, security, information security, engineering, law, computer science or other relevant discipline.

Experience:

Essential: - Minimum ten years of experience in a civil aviation administration or regulatory body, international organization or aviation industry, with a significant part of this period developing policies and guidance related to cybersecurity in the aviation context; - Considerable knowledge of ICAO’s work on aviation cybersecurity; - Considerable knowledge of aviation systems (aircraft, airline, airport, ANSP, maintenance, supply chain, etc…) and the interactions between the systems of the different aviation stakeholders in the air transport process and data/information exchange between those systems; - Demonstrated ability to manage multiple tasks simultaneously; and - Exceptional writing skills in English.

Desirable: - Experience in Project Management.

Language:

Essential: Fluent reading, writing and speaking abilities in English.

Desirable: A working knowledge of a second language of the Organization (Arabic, Chinese, French, Russian, or Spanish).

Additional Information Consultants will be held to the highest ethical standards and are required to sign a Code of Conduct and an individual declaration of independence (or statement of confidentiality) upon acceptance of the assignment.

Please note that the monthly rate for Band C varies from CAD$ 7,562 to CAD$ 10,910.

No Fee THE UNITED NATIONS DOES NOT CHARGE A FEE AT ANY STAGE OF THE RECRUITMENT PROCESS (APPLICATION, INTERVIEW MEETING, PROCESSING, OR TRAINING). THE UNITED NATIONS DOES NOT CONCERN ITSELF WITH INFORMATION ON APPLICANTS’ BANK ACCOUNTS.