Cyber Delivery Assurance Lead

Cyber Security training courses; Uxbridge; On-site; GBP 60,000 - GBP 80,000; Full time

Job summary

A leading Aviation company is seeking a Cyber Delivery Assurance Lead in Uxbridge, UK. This role involves providing assurance on cybersecurity controls for the BA.com project, engaging with senior stakeholders, and embedding security measures aligned with industry standards. Candidates should have relevant qualifications like CISSP or ISO27001 and experience in agile environments. Strong technical knowledge and communication skills are essential for success in this position.

Qualifications

• Broad technical knowledge of cybersecurity controls through appropriate qualifications.
• Experience in at least one area: cloud security, network security, or similar.
• Experience working in a regulated environment.

Responsibilities

• Provide assurance that product delivery meets risk appetite.
• Embed security controls aligned to risk.
• Engage with CSO for consistency and best practices.

Skills

Broad technical knowledge of cybersecurity controls

Good communication skills

Agile environment experience

Senior stakeholder management

Education

CISSP, ISO27001 Lead Implementor or relevant SANS GIAC

Job description

Overview

Join a leading Aviation company as a Cyber Delivery Assurance Lead.

• Will be working on the BA.com project
• Work closely with delivery teams and Cyber teams
• Work with the Architect to get reviews
• Experience with Gira, speak to the teams to get proof of what the teams have done and evidence
• Good communication skills, need to be able to speak technically and operationally

Key Responsibilities

• Provide assurance to the Head of Cyber Delivery Assurance that product delivery and maintenance meet BA's risk appetite and that controls are operating effectively.
• Successfully embedding security by design with proportionate appropriate cyber controls aligned to risk.
• Senior stakeholder management (negotiation and influencing) across multinational organisations, including third party suppliers and delivery partners.
• Take full responsibility for the secure delivery of programmes, by assisting the product team by interpreting and embedding Cybersecurity policies, standards, guidelines and procedures into an agreed framework against all product team deliverables.
• Engage proactively with the
  Cybersecurity Office (CSO) project assurance and architecture functions, ensuring consistency and best cyber practice is adhered to.
• Provide authoritative advice and guidance on the application and operation of all types of security controls, including legislative or regulatory requirements.
• Advise users on risk management and reduction and promote awareness in conjunction with cyber awareness programmes.

Key Requirements

• Broad technical knowledge of cybersecurity controls is demonstrated by attainment of appropriate qualifications, e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent.
• Knowledge of the NIST framework, PCI DSS, GDPR and NIS as well as NCSC cyber guidance.
• Experience working in an agile delivery environment would be highly advantageous.
• Specific cyber knowledge and demonstrable experience in at least one of the following areas: cloud security, network security, digital security (multi-platform), infrastructure security, security by design, security architecture
• Experience working in a regulated environment with specific cyber requirements that require interpretation and application.

Additional Information

Interview Process: 2 Rounds

How to Apply

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.