Cyber Security Analyst, Risk

Together, we’re working to welcome millions more passengers, while ensuring aviation can continue to be a force for good by leading global efforts in sustainability. At Heathrow, you can be part of the team that delivers solutions that make every journey better for millions each year. That means meeting the changing needs of the passengers, colleagues and partners who use our airport to work, travel, trade, shop, eat, explore and connect.

Our Solutions team covers project management, process improvement, business change, technology, cyber defence, master planning, infrastructure and procurement, bringing together people with the skills to deliver prestigious and often large‑scale projects, from transforming terminals to making big reductions in our carbon emissions.

Every day will test your skills and give you the opportunity to make your mark. You might be working with the technology and data that power our city within a city, driving vital commercial agreements with everyone from retailers to airlines, or improving the unique infrastructure that includes everything from 200 buildings to 250 HV substations. It’s a collaborative environment where you can rely on the support of experts as you take on projects that you’ll both take pride in and feel passionate about.

The Cyber Security Analyst, Risk sits within the Cyber Security Governance, Risk and Compliance team and is responsible for supporting the day‑to‑day oversight and management of cyber risk across the organisation. The role focuses on ensuring that cyber risks are effectively identified, assessed, documented and managed in accordance with Heathrow’s policies, enterprise risk framework and recognised industry best practice.

• Assist in the management and continuous improvement of relevant policies relating to cyber risk management, ensuring that these align to recognised best practice
• Help mature and drive effective cyber risk management practices across the business, ensuring that risks are identified, assessed, and managed appropriately and in line with Heathrow policies and relevant good practice
• Support the implementation of modern risk management tooling, including ensuring appropriate business engagement and support, to maximise the value of the tool
• Participate in internal and external audits, including relevant follow‑up activity
• Support the delivery of Heathrow’s third‑party risk management programme
• Compile and analyse data for management reporting and metrics
• Maintain a comprehensive and current understanding of cyber security and information security threats
• Track and follow‑up with risk owners to ensure risks are appropriately remediated according to agreed timescales and approach

• Proven experience operating in cyber risk roles. Experience in mixed IT/OT environments would be advantageous
• Relevant risk, assurance and/or cyber leadership certifications, such as CISSP, CISM, C‑RISC, CISA, ISO 27001 Lead Auditor / Lead Implementor would be advantageous
• Knowledge and understanding of key information security controls and processes
• Experience applying cyber risk management frameworks (e.g. ISO 27005, NIST risk management framework, etc) in complex operational environments
• Understanding of cyber security standards and frameworks, in particular ISO 27001, NIST Cybersecurity Framework v2.0, and the NCSC Cyber Assessment Framework
• Understanding of the UK regulatory landscape for cyber security and resilience, including the Network and Information Systems Regulations 2018
• Knowledge and experience of relevant aviation security frameworks (e.g. CAP 1753) would be advantageous

Heathrow is an iconic airport that offers a world full of fresh possibilities. Every day, you’ll discover new opportunities, encounter people from all cultures, nationalities and experiences, and contribute to our ambitious plans. We inspire everyone to deliver on our goals, working together to welcome millions more passengers while advancing global sustainability efforts.

We offer competitive salaries, annual bonuses, long‑term share‑in‑success plans, generous annual leave allowances,…