VP of Cybersecurity

Who we are: AerSale® is a global leader and market innovator specializing in aviation products and services to meet the growing demand for aftermarket support in global passenger, cargo, and government segments. Featuring complete aircraft nose-to-tail, value-added offerings, including Aircraft & Component Maintenance, Repair and Overhaul Services (MRO), Aircraft & Engine Sales and Leasing, Used Serviceable Material (USM) Sales and Parts Exchange, Flight Equipment Asset Management Services, Internally developed aircraft and component modifications (engineered solutions) designed to enhance aircraft performance and operating economics (e.g. AerSale®, AerTrak® and AerAware).  For more information, visit us at www.aersale.com.

What we Offer:

• Medical Insurance
• 100% Employer Paid Dental, Vision, Life, Short and Long Term Disability Insurance
• 401K with Employer Contribution
• Employee Stock Purchase Plan (ESPP)
• Education Reimbursement (related field)
• Employee Referral Program and Recognition Program
• Paid Holidays and 15 Paid Time-Off Days annually

Job Description:

Job Profile Summary:

Reporting to the Chief Information Officer, the VP of Cybersecurity sets and leads AerSale’s enterprise cybersecurity strategy, governance, and operations. The role protects AerSale’s information, systems, products, and customers across all three business segments — building a Zero Trust posture, governing the secure adoption of AI, and ensuring the compliance obligations of a publicly traded aviation company are met. The VP of Cybersecurity leads the teams that identify, protect, detect, respond to, and recover from cyber threats and vulnerabilities.

Essential Duties and Responsibilities:

Strategy & Governance

• Define and own the enterprise cybersecurity strategy, roadmap, and budget, aligned to business risk and AerSale’s growth objectives.

• Establish and maintain security policies, standards, and a governance framework (e.g., NIST CSF) and report risk posture to executive leadership and the Audit Committee.

• Operate enterprise cyber risk management: risk assessments, threat modeling, control design, and remediation tracking.

Architecture & Engineering

• Lead the design and implementation of a Zero Trust architecture spanning identity, network, endpoint, data, and cloud.

• Direct security tooling strategy and operations — SIEM, DLP, IPS/IDS, EDR/XDR, identity and access management, and email and cloud security.

• Embed “secure by design” practices and partner with application and engineering teams on secure software and integration designs.

AI & Data Security

• Govern the secure adoption of enterprise AI (e.g., the Claude Team deployment and Microsoft 365 Copilot): establish controls for data egress/leakage, prompt-injection and model-misuse risks, acceptable use, and data-classification boundaries.

• Partner with data and AI leadership to secure data pipelines, integration/MCP layer, and AI/ML workflows.

Security Operations & Incident Response

• Lead monitoring, threat detection, vulnerability management, and incident response; maintain and regularly exercise incident-response and breach-notification plans.

• Maintain current threat intelligence from law enforcement and industry sources and brief stakeholders with actionable guidance.

Compliance, Third-Party & Product Risk

• Ensure compliance with applicable obligations — SOX IT general controls, FAA / aviation cybersecurity expectations, and customer and contractual requirements; coordinate audits and remediation.

• Lead third-party / supply-chain security risk management and vendor security assessments.

People & Culture

• Build, lead, and develop the cybersecurity team; run the enterprise security-awareness and phishing-resilience program.

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master’s preferred.

• 10+ years in cybersecurity, including at least 5 years in a security leadership / managerial role.

• Demonstrated experience building security programs and Zero Trust architectures in a regulated and/or publicly traded environment.

• Experience governing cloud (Microsoft 365 / Azure), AWS and SaaS security.

Skills & Abilities

• Deep knowledge of security frameworks (NIST CSF, ISO/IEC 27001) and risk management.

• Hands-on familiarity with SIEM, DLP, IPS/IDS, EDR/XDR, and IAM technologies.

• Experience defining governance and controls for enterprise AI adoption (data egress, prompt-injection, acceptable use).

• Ability to manage budgets, teams, and compliance programs.

• Strong executive communication and cross-functional collaboration with senior leadership.

• Leadership and strategic planning in cybersecurity.

Preferred

• Industry certifications (e.g., CISSP, CISM, CCSP, CRISC).

• Aviation / aerospace or other regulated-industry experience; familiarity with SOX, FAA, and — if applicable to defense-related work — CMMC requirements.

If you would like to see your career take flight, apply today!

Aersale is an Equal Opportunity Employer. The company prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, general identity, national origin, or for inquiring about, discussing, or disclosing information about compensation. As a Government Contractor Aersale takes affirmative action to employ and advance in employment individuals without regard to disability or veteran status. If you are an Individual with Disability and require any assistance with the application process please contact Human Resources at:  Monica.Rivas@aersale.com.