Cyber Security Analyst

Summary: The Cyber Delivery Assurance Lead role at a leading airline company in London involves overseeing the implementation of cyber security policies and standards within product delivery teams. The position requires collaboration with various stakeholders to ensure that product delivery aligns with the organization's risk appetite and security controls. The role emphasizes proactive engagement with cyber security functions and the provision of authoritative guidance on security controls. This position is critical for embedding security by design and managing cyber risks effectively across multiple products.

Key Responsibilities:

• Provide assurance to the Head of Cyber & IT Risk regarding product delivery and maintenance compliance with BA’s risk appetite.
• Embed security by design with appropriate cyber controls aligned to risk.
• Manage senior stakeholder relationships across multinational organizations, including third-party suppliers.
• Ensure secure delivery of programs by interpreting and embedding Cyber Security policies and standards.
• Engage with the IAG Cyber Security Office for project assurance and adherence to best practices.
• Provide guidance on security controls and legislative requirements.
• Advise on risk management and promote cyber awareness.

Key Skills:

• Ability to conduct threat and risk assessments across various technology stacks.
• Strong leadership and communication skills to influence senior stakeholders.
• Experience in managing change and prioritizing across multiple products.
• Broad technical knowledge of cyber security controls (CISSP, ISO27001, SANS GIAC, etc.).
• Familiarity with NIST framework, PCI DSS, GDPR, and NCSC guidance.
• Experience in agile delivery environments.
• Specific knowledge in areas such as cloud security, network security, and security architecture.
• Experience in regulated environments with specific cyber requirements.

Salary (Rate): 725

City: London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT