Overview
We are seeking a full-time Aviation Systems Security Engineer 2 at our office in Olathe, Kansas, to serve as a primary resource for the planning, implementation, maintenance, and continual improvement of the Aviation segment Information Security Management System. Working in close collaboration with various engineering teams, you will apply your systems engineering skills and cybersecurity expertise to ensure certification and business requirements are met and Garmin’s high security posture is maintained.
Essential Functions
- Serve as a primary resource for the planning, implementation, maintenance, and continual improvement of the Aviation segment ISMS
- Monitor and manage the ISMS scope, policy framework, and risk treatment plan
- Coordinate and facilitate internal and external audits related to ISO 27001, CMMC, and EASA Part Information Security certification or compliance
- Plan, design, and analyze security architectures to meet certification and business requirements
- Perform security assessments using applicable industry standards, guidance, and methods
- Generate and maintain security standards, processes, and requirements
- Develop functional risk assessments to determine allocation of security controls and risk acceptability
- Actively monitor and evaluate the global cybersecurity landscape
- Perform technical market research on emerging technologies
- Support incident response efforts including investigation, remediation, and communication
- Coordinate security initiatives internally to establish a robust security posture
- Understand and communicate customer expectations across aviation markets
- Proactively improve processes, tools, and procedures
- Exemplify Garmin’s Mission, Vision, Values, and Quality Policy and proactively work to improve Garmin’s image and culture
Basic Qualifications
- Bachelor’s Degree in an Engineering field AND a minimum of 1 year relevant experience OR an equivalent combination of education and relevant experience
- Excellent academics (cumulative GPA greater than or equal to 3.0 as a general rule)
- Demonstrated advanced knowledge in one or more of the following technical areas: Systems Integration, System Safety, System Requirements, System Security
- Demonstrated problem solving ability
- Demonstrated understanding of security principles, control frameworks, and regulatory requirements (e.g., risk assessment, audit methodologies, access control, incident response)
Desired Qualifications
- Master’s Degree in an Engineering field
- Outstanding academics (cumulative GPA greater than or equal to 3.5)
- Demonstrated hands-on experience in the implementation, operation, and maintenance of an ISO/IEC 27001 or NIST CSF 2.0 Information Security Management System (ISMS)
- Demonstrated understanding of NIST 800-53 and NIST 800-171 security controls
- Demonstrated ability to develop software, perform security testing, or conduct security risk assessments in accordance with RTCA DO-326A, EUROCAE ED-202A, or ASTM F3532
- Demonstrated passion for and involvement in the aviation community
- Operational knowledge of Garmin or competitive avionics
Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.
This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits