Chief Information Security Officer

MAG (Airports Group); Manchester; Hybrid; GBP 140,000 - 200,000; Full time

Job summary

MAG (Airports Group) in Manchester Airport-based hybrid role seeks a transformative Chief Information Security Officer to define and drive enterprise-wide information security strategy, governance, and resilience across complex technology environments serving millions of passengers and partners.

You will partner with executives and regulators, own security risk management, cyber incident preparedness, and culture initiatives, while balancing growth with robust controls and regulatory compliance

Qualifications

• Significant senior leadership experience across cyber security, information security, risk management and technology.
• Proven experience developing and implementing enterprise security strategies.
• Strong understanding of cyber security governance, risk management and regulatory compliance frameworks.
• Experience influencing executive stakeholders and presenting complex security issues to boards and senior leaders.

Responsibilities

• Develop and deliver MAG's enterprise-wide cyber security strategy and vision.
• Lead the Cyber Security function, ensuring effective protection of information assets, systems and services.
• Provide regular cyber risk reporting and strategic advice to executive leadership and Board stakeholders.
• Act as MAG's Cyber Responsible Manager for regulatory compliance activities and senior liaison with external regulators and government agencies.
• Build and maintain an effective information security governance framework, policies and standards.
• Lead cyber incident preparedness, response and recovery capabilities.
• Drive security awareness and security culture initiatives across the organisation.
• Manage cyber security investment, budgets and resources to deliver maximum value and risk reduction.
• Establish strong relationships with internal stakeholders, suppliers, industry bodies and government agencies to improve resilience and share best practice.

Skills

Senior leadership

Cyber security strategy

Governance & compliance

Stakeholder management

Board communication

Budget ownership

Regulatory experience

Team leadership

Education

CISSP/CISM/CISA

Job description

Chief Information Security Officer (CISO)

Manchester Airports Group (MAG)

Manchester Airport based (hybrid)

Permanent

Summary

Protect the future of one of the UK's most critical infrastructure organisations

At MAG, we connect people with the world. As the UK's largest airport group, we operate complex, technology-enabled environments that serve millions of passengers and thousands of business partners every year.

We're looking for an exceptional Chief Information Security Officer (CISO) to lead our cyber security strategy, strengthen our resilience and help shape the future of secure digital aviation. This is a rare opportunity to influence board-level decision making while protecting critical infrastructure across a diverse and evolving technology landscape.

As our CISO, you'll be responsible for defining and delivering MAG's enterprise-wide information security strategy, ensuring our information assets, systems, colleagues, customers and partners remain protected against an increasingly complex threat landscape. You'll work closely with executive leaders, regulators and industry partners to balance business growth with effective risk management and regulatory compliance.

Why MAG?

At MAG, we're more than airports. We’re the Journey Makers. We create seamless experiences that keep people and businesses moving, while investing in the future of aviation, technology and sustainability.

You'll join a business where cyber security is recognised as a strategic priority, with the opportunity to influence critical decisions, lead high-performing teams and help shape the security culture of a major UK infrastructure organisation.

The Role

Reporting to the Chief Information Officer, you'll lead MAG's cyber security function and act as the organisation's most senior security professional, providing strategic direction across information security, cyber resilience, governance and compliance.

Key responsibilities

• Develop and deliver MAG's enterprise-wide cyber security strategy and vision.
• Lead the Cyber Security function, ensuring effective protection of information assets, systems and services.
• Provide regular cyber risk reporting and strategic advice to executive leadership and Board stakeholders.
• Act as MAG's Cyber Responsible Manager for regulatory compliance activities and senior liaison with external regulators and government agencies.
• Build and maintain an effective information security governance framework, policies and standards.
• Lead cyber incident preparedness, response and recovery capabilities.
• Drive security awareness and security culture initiatives across the organisation.
• Manage cyber security investment, budgets and resources to deliver maximum value and risk reduction.
• Establish strong relationships with internal stakeholders, suppliers, industry bodies and government agencies to improve resilience and share best practice.

What you'll bring

We're looking for a strategic and influential leader who can operate confidently at executive and board level while also understanding the practical realities of delivering effective cyber security.

Essential

• Significant senior leadership experience across cyber security, information security, risk management and technology.
• Proven experience developing and implementing enterprise security strategies.
• Strong understanding of cyber security governance, risk management and regulatory compliance frameworks.
• Experience influencing executive stakeholders and presenting complex security issues to boards and senior leaders.
• Professional security qualification such as CISSP, CISM or CISA.
• Outstanding communication, relationship-building and stakeholder management skills.
• Experience leading, developing and motivating high-performing teams.
• Strong commercial awareness, including budget ownership and supplier management.

Desirable

• Experience within highly regulated or critical national infrastructure environments.
• Knowledge of frameworks such as NIST, ISO 27001, COBIT, CIS Controls and NCSC Cyber Assessment Framework.
• Experience working within aviation, transport, infrastructure or other complex operational environments.

Our Values

At MAG, our values shape how we work and how we lead:

• People at our Core
• Growing Every Day
• Safe Hands
• Power of Teamwork
• Sustainable Future for All

We're looking for a leader who embodies these values, builds trusted relationships and inspires others to think differently about cyber security and organisational resilience.

What we offer

In return, you'll have the opportunity to make a real impact within a business that is investing in technology, innovation and its people. Alongside a competitive executive reward package, you'll benefit from working in a collaborative environment where your expertise will help shape the future of our organisation.

Equal Opportunities & Reasonable Adjustments

We’re building something brilliant at MAG: a diverse team of Journey Makers who share our values and want to make a difference. We’re on a mission to be number one in our industry, and that takes talent in all its forms.

With so many exciting roles across our airports and businesses, there’s space for your unique strengths to shine. Whether this is your first role or your next big step, we want to hear from you, even if you don’t think you tick every box. What matters most is what you bring.

We’re proud to be a Disability Confident employer. If you need any adjustments to support your application or interview, just let us know. We’re committed to helping you perform at your best.

At MAG, every journey matters. Our Colleague Communities play a big part in that: Women’s Network, Embrace (Race & Ethnicity), Fly with Pride (LGBTQIA+), Mind Matters (Mental Health), PACT (Parents & Carers), RespectABILITY (Disability & Neurodiversity), and the CAVU Global ID&E Affinity Group.