Cyber Security Manager

• Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment. 
• Strong understanding of third-party risk management frameworks, ISO 27001, NIST, and NCSC guidance. 
• Experience conducting supplier security assessments and managing remediation activities. 
• Excellent stakeholder management and communication skills, with the ability to influence at all levels. 
• Analytical mindset with strong problem-solving and decision-making abilities. 
• Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience). 

Ideally you’ll also have

• Experience working in aviation, transport, or other regulated industries. 
• Knowledge of Heathrow’s operational technology and digital systems landscape. 
• Familiarity with supplier assurance tools and continuous monitoring platforms. 

• Developing and implementing Heathrow's supplier cyber risk management framework, ensuring alignment with NCSC and ISO 27001 standards.
• Conducting supplier security assessments and audits, identifying vulnerabilities, and driving remediation plans with internal and external stakeholders.
• Collaborating with Procurement and Legal teams to embed cyber security requirements into supplier contracts and onboarding processes.
• Monitoring supplier performance and compliance through continuous assurance activities and risk reporting.
• Supporting incident response activities involving suppliers, ensuring lessons learned are captured and improvements implemented.

• Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment.
• Strong understanding of third-party risk management frameworks, ISO 27001, NIST, and NCSC guidance.
• Experience conducting supplier security assessments and managing remediation activities.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels.
• Analytical mindset with strong problem-solving and decision-making abilities.
• Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience).

Ideally you'll also have

• Experience working in aviation, transport, or other regulated industries.
• Knowledge of Heathrow's operational technology and digital systems landscape.
• Familiarity with supplier assurance tools and continuous monitoring platforms.