Summary: The Cyber Delivery Assurance Lead role at a leading airline company in London involves overseeing the implementation of cyber security policies and standards within product delivery teams. The position requires collaboration with various stakeholders to ensure that security measures align with the organization's risk appetite. The role emphasizes proactive engagement with cyber security functions and the provision of authoritative guidance on security controls. This position is critical for ensuring secure program delivery and managing cyber security risks effectively.

Key Responsibilities:

• Provide assurance to the Head of Cyber & IT Risk regarding product delivery and maintenance compliance with BA’s risk appetite.
• Embed security by design with appropriate cyber controls aligned to risk.
• Manage senior stakeholder relationships across multinational organizations, including third-party suppliers.
• Interpret and embed Cyber Security policies and standards within product teams.
• Engage with the IAG Cyber Security Office to ensure adherence to best practices.
• Advise on the application of security controls and promote risk management awareness.
• Conduct threat and risk assessments and identify mitigating controls.
• Lead change initiatives to secure the future direction of BA.
• Provide regular updates to stakeholders on security deliverables.
• Identify and manage cyber security risks throughout product lifecycles.

Key Skills:

• Broad technical knowledge of cyber security controls (CISSP, ISO27001, SANS GIAC, etc.).
• Knowledge of NIST framework, PCI DSS, GDPR, and NIS.
• Experience in agile delivery environments.
• Specific knowledge in cloud security, network security, digital security, infrastructure security, and security architecture.
• Ability to communicate and influence at senior levels.
• Strong prioritization skills across multiple products.
• Experience in regulated environments with specific cyber requirements.
• Ability to work under pressure in changing environments.

Salary (Rate): undetermined

City: London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT