Intern in the ESA Security Office - Cyber Internal Audit Section
Location
ESTEC, Noordwijk, Netherlands
Our team and mission
In the ESA Security Office, the Cybersecurity Industrial Audits play a major role in the security assurance process, contributing to the cybersecurity risk management associated to the organisation and infrastructure that the directorates deliver to their customers. The Cybersecurity Industrial Audits are part of the ESA Security Policy.
Candidates interested are encouraged to visit the ESA website: http://www.esa.int
Field(s) of activity for the internship
As an intern, you will have the following tasks:
- contributing to the security assurance process and cybersecurity risk management for ESA's programmes under the European Space Security Policy;
- researching and analysing emerging Artificial Intelligence (AI) cybersecurity frameworks (such as FAICP, ISO/IEC 42001:2023, and NIST AI RMF);
- contributing to the analysis and design of integration solutions with the current Cyber Internal Audit Framework used across the supply chain of the ESA programs.
Learning areas:
- ESA Cyber Internal Audit Framework;
- Cybersecurity Frameworks such as NIST, FACIP, SSDF, BSA or Secure Control Framework;
- Cybersecurity International Standards such as ISO27K series, ISO22301or ISO31K;
- Cybersecurity Guides and Guidelines such as OWASP, the CMMC or the Cloud Control Matrix;
- auditing standards and guidelines from ISACA or the IIA.
Behavioural competencies
Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking
For more information, please refer to ESA Core Behavioural Competencies guidebook
Education
You must be a university student, preferably in your final or second-to-last year of university course at Master's level. In addition, you must be able to prove that you will be enrolled at your university for the entire duration of the internship.
Additional requirements
The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another ESA Member State language is an asset.
During the interview, your motivation for applying to this role will be explored.
Basic knowledge or training in information security and auditing aspects will be considered as an asset.
Knowledge of software development is considered as an asset.
Diversity, Equity and Inclusiveness
ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, religious beliefs, age, disability or other characteristics.
At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process. If you would like to discuss this further, please contact us via email at ESA.Student.Internships@esa.int.
Important Information and Disclaimer
During the recruitment process, the Agency may request applicants to undergo selection tests.
The information published on ESA’s careers website regarding internship conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have.
Nationality
Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, and the United Kingdom. Applicants from Canada as a Cooperating State can apply as well as those from Bulgaria, Croatia and Malta as European Cooperating States (ECS).
