The Cyber Security Analyst, Aviation will undertake analysis and evaluations to protect Heathrow and critical aviation infrastructure. You will contribute to the resilience and security of aviation systems, ensuring the organisation adheres to the highest standards of aviation cybersecurity. You'll also be responsible for helping to build our Cyber Threat Intelligence (CTI) capability by proactively identifying and tracking cyber threats targeting the organisation and by building relationships with external stakeholders across the UK Critical National Infrastructure threat intelligence community.
Responsibilities
Cyber Security Oversight
- Assess, monitor, and enhance the resilience of aviation security systems to ensure they meet security requirements including regulatory obligations and compliance standards.
- Ensure the physical and cyber security of critical computer rooms, data centres, and related infrastructure within the aviation environment.
Stakeholder Liaison & Collaboration
- Build and maintain strong working relationships with internal stakeholders, external aviation authorities, and regulatory bodies to ensure alignment on security best practices and standards.
- Act as a point of contact for any queries or concerns related to aviation cyber security.
- Play an active and collaborative role in building cyber security resilience at Heathrow by working with internal and external stakeholders as part of a CNI threat intelligence community.
Secure by Design
- Champion "Secure by Design" principles across the organisation to ensure that security is integrated at all stages of system development and implementation.
- Provide expertise to cross-functional teams on implementing security solutions that are scalable, sustainable, and compliant with aviation security standards.
Cyber Threat Intelligence
- Proactively seek out and identify, track and report cyber threats and campaigns targeting the organisation using multiple intelligence sources, including OSINT, commercial feeds and industry sharing groups.
- Conduct threat actor profiling and report on attacker motivations, tooling and behaviours.
Qualifications
- Aviation Cyber Security Knowledge: Understanding of aviation security systems, regulatory requirements, and industry standards.
- Cyber Threat Intelligence: A strong understanding of CTI concepts, the cyber security landscape and threat actors, and a proven ability to proactively identify and report cyber threats using multiple intelligence sources.
- OSINT: Ability to conduct open-source cyber security and CTI research.
- Analytical mindset: The ability to identify patterns, trends and emerging threats in large datasets.
- Stakeholder Management: Ability to effectively communicate and work with internal teams, external vendors, and regulatory bodies.
- Technical Proficiency: An understanding of cyber security principles, risk management frameworks, and security technologies.
Desirable
- Experience with ISO 27001 or other security management frameworks.
- Familiarity with aviation security regulations such as EU/UK/EASA aviation security frameworks or ICAO.
- Experience working in an operational security environment would be beneficial
- Project Management: Experience working within cross-functional projects focused on cyber security improvements.
- Certifications within the Cyber field such as CISSP, CISM would be a bonus.
Working Location
Our Hybrid working approach offers the opportunity for colleagues in some roles to work from home for an average of two days a week, providing the flexibility to work in an agile way whilst ensuring we deliver for the operational needs of Heathrow. Working arrangements vary from team to team and will be confirmed during the recruitment process. You'll need to be based in the UK and within a commutable distance to Heathrow.
Our rewards
We offer competitive salaries and excellent benefits that will support you now and in the future. As well as performance-based annual bonuses and our longer-term Share in Success Bonus plans, we also offer generous annual leave allowances and market-leading pensions. With family friendly policies, access to private health insurance and a wide range of wellbeing tools, we'll support you to be at your best inside and outside work. And of course, we'll provide varied learning and development opportunities too. Here you'll find everything you need for a fulfilling career journey that can take you in exciting directions.
Equal Opportunities
As an equal opportunities employer, we encourage applications from all. We believe that diverse talent makes us stronger - not least because we welcome passengers from all corners of the globe, every single day. Heathrow is an accessible place to work. With five diversity networks, we champion inclusivity and celebrate individuality.
