Cyber Security Analyst within the Cyber Security Governance, Risk and Compliance team. Supporting effective management and oversight of cyber risk at Heathrow Airport.
Responsibilities
support the day-to-day oversight and management of cyber risk across the organisation
ensure that cyber risks are effectively identified, assessed, documented and managed in accordance with Heathrow’s policies, enterprise risk framework and recognised industry best practice
strengthen cyber risk management practices, ensuring that risks are properly identified, assessed and treated in line with Heathrow policies and recognised industry standards
contribute to the development and continuous improvement of cyber risk policies, standards and frameworks
help mature and drive effective cyber risk management practices across the business
support the delivery of Heathrow’s third-party risk management programme
compile and analyse data for management reporting and metrics
maintain a comprehensive and current understanding of Cyber Security and Information Security threats.
Requirements
Proven experience operating in cyber risk roles. Experience in mixed IT/OT environments would be advantageous.
Relevant risk, assurance and/or cyber leadership certifications, such as CISSP, CISM, C-RISC, CISA, ISO 27001 Lead Auditor / Lead Implementor would be advantageous
Knowledge and understanding of key Information Security controls/processes
Experience applying Cyber Risk Management frameworks (e.g. ISO 27005, NIST Risk Management Framework, etc) in complex operational environments
Understanding of cyber security standards and frameworks, in particular ISO 27001, NIST Cybersecurity Framework v2.0, and the NCSC Cyber Assessment Framework
Understanding of the UK regulatory landscape for cyber security and resilience, including the Network and Information Systems Regulations 2018.
Knowledge and experience of relevant aviation security frameworks (e.g. CAP1753) would be advantageous.
Information Security Analyst handling security incidents and leading technical initiatives within a retail company. Involves reporting, tool management, and policy development.
Lead Cybersecurity Analyst specializing in Cloud Security for FIS. Assessing security posture of cloud environments and providing actionable remediation strategies.
Network Security Analyst II securing information systems and networks against security threats at Cayuse. Responsible for vulnerability assessments, incident response, and security measures implementation.
Senior Network Security Analyst responsible for network security and infrastructure management at Minsait. Collaborating on innovative projects while ensuring compliance and performance optimization.
Senior Access Management Analyst ensuring information security and integrity at Banco ABC Brasil. Managing user access and implementing security policies in the organization.
Senior Security Analyst at Asta focused on security engineering and operational resilience in a hybrid role. Collaborating with various teams to enhance security protocols and manage incidents.
Information Security Analyst securing client systems and data through analysis and compliance with standards. Collaborating with IT teams to implement secure system solutions and oversee risk assessments.
IT Security Analyst for Bundesdruckerei GmbH monitoring security events in diverse infrastructures. Collaborating within the Blue Team and responding to security incidents.