Chief Information Security Officer

MAG (Airports Group); Wythenshawe; Hybrid; GBP 180,000 - 280,000; Full time

Benefits offered by this job

Competitive executive reward package

Job summary

Manchester Airports Group (MAG) is seeking an exceptional Chief Information Security Officer (CISO) to lead its cyber security strategy and strengthen resilience across MAG’s technology-enabled environments. Based hybrid at Manchester Airport, this permanent role reports to the CIO and influences board-level decisions while protecting critical infrastructure.

You will define MAG's enterprise security strategy, oversee governance and regulatory compliance, and partner with executives, regulators,

Qualifications

• Senior leadership experience in cyber/information security.
• Experience developing enterprise security strategies.
• Strong governance, risk management and regulatory compliance knowledge.
• Ability to influence boards and executive stakeholders.
• Professional security qualifications (CISSP/CISM/CISA).
• Excellent communication and stakeholder management skills.
• Experience with budgeting and supplier management.
• Background in regulated infrastructure (critical national infrastructure).
• Familiarity with risk management frameworks (NIST, ISO 27001, COBIT).
• Experience in aviation, transport, or complex operations.

Responsibilities

• Define and deliver MAG's enterprise-wide information security strategy.
• Lead the Cyber Security function and protect information assets.
• Provide cyber risk reporting to executives and Board.
• Act as Cyber Responsible Manager for regulatory compliance.
• Develop governance framework, policies and standards.
• Lead incident preparedness, response and recovery capabilities.
• Drive security awareness and culture across the organisation.
• Manage cyber security budgets and resources.
• Collaborate with regulators, partners and internal stakeholders to improve resilience.

Skills

Strategic leadership

Enterprise security

Governance & compliance

Regulatory compliance

CISSP/CISM/CISA

Stakeholder management

Budget management

Team leadership

Aviation/critical infrastructure

Board-level influencing

Tools

NIST

ISO 27001

COBIT

CIS Controls

NCSC CAF

Job description

Select how often (in days) to receive an alert:

Chief Information Security Officer (CISO)

Manchester Airports Group (MAG)

Manchester Airport based (hybrid)

Permanent

Summary

Protect the future of one of the UK's most critical infrastructure organisations

At MAG, we connect people with the world. As the UK's largest airport group, we operate complex, technology-enabled environments that serve millions of passengers and thousands of business partners every year.

We're looking for an exceptional Chief Information Security Officer (CISO) to lead our cyber security strategy, strengthen our resilience and help shape the future of secure digital aviation. This is a rare opportunity to influence board-level decision making while protecting critical infrastructure across a diverse and evolving technology landscape.

As our CISO, you'll be responsible for defining and delivering MAG's enterprise-wide information security strategy, ensuring our information assets, systems, colleagues, customers and partners remain protected against an increasingly complex threat landscape. You'll work closely with executive leaders, regulators and industry partners to balance business growth with effective risk management and regulatory compliance.

Why MAG?

At MAG, we're more than airports. We're the Journey Makers. We create seamless experiences that keep people and businesses moving, while investing in the future of aviation, technology and sustainability.

You'll join a business where cyber security is recognised as a strategic priority, with the opportunity to influence critical decisions, lead high-performing teams and help shape the security culture of a major UK infrastructure organisation.

The role

Reporting to the Chief Information Officer, you'll lead MAG's cyber security function and act as the organisation's most senior security professional, providing strategic direction across information security, cyber resilience, governance and compliance.

Key responsibilities

• Develop and deliver MAG's enterprise-wide cyber security strategy and vision.
• Lead the Cyber Security function, ensuring effective protection of information assets, systems and services.
• Provide regular cyber risk reporting and strategic advice to executive leadership and Board stakeholders.
• Act as MAG's Cyber Responsible Manager for regulatory compliance activities and senior liaison with external regulators and government agencies.
• Build and maintain an effective information security governance framework, policies and standards.
• Lead cyber incident preparedness, response and recovery capabilities.
• Drive security awareness and security culture initiatives across the organisation.
• Manage cyber security investment, budgets and resources to deliver maximum value and risk reduction.
• Establish strong relationships with internal stakeholders, suppliers, industry bodies and government agencies to improve resilience and share best practice.

What will make you successful in the role?

We're looking for a strategic and influential leader who can operate confidently at executive and board level while also understanding the practical realities of delivering effective cyber security.

• Significant senior leadership experience across cyber security, information security, risk management and technology.
• Proven experience developing and implementing enterprise security strategies.
• Strong understanding of cyber security governance, risk management and regulatory compliance frameworks.
• Experience influencing executive stakeholders and presenting complex security issues to boards and senior leaders.
• Professional security qualification such as CISSP, CISM or CISA.
• Outstanding communication, relationship-building and stakeholder management skills.
• Experience leading, developing and motivating high-performing teams.
• Strong commercial awareness, including budget ownership and supplier management.
• Experience within highly regulated or critical national infrastructure environments.
• Knowledge of frameworks such as NIST, ISO 27001, COBIT, CIS Controls and NCSC Cyber Assessment Framework.
• Experience working within aviation, transport, infrastructure or other complex operational environments.

Our Values

At MAG, our values shape how we work and how we lead:

• People at our Core
• Growing Every Day
• Safe Hands
• Power of Teamwork
• Sustainable Future for All

We're looking for a leader who embodies these values, builds trusted relationships and inspires others to think differently about cyber security and organisational resilience.

What we offer

In return, you'll have the opportunity to make a real impact within a business that is investing in technology, innovation and its people. Alongside a competitive executive reward package, you'll benefit from working in a collaborative environment where your expertise will help shape the future of our organisation.

Equal Opportunities & Reasonable Adjustments

We’re building something brilliant at MAG: a diverse team of Journey Makers who share our values and want to make a difference. We’re on a mission to be number one in our industry, and that takes talent in all its forms.

With so many exciting roles across our airports and businesses, there’s space for your unique strengths to shine. Whether this is your first role or your next big step, we want to hear from you, even if you don’t think you tick every box. What matters most is what you bring.

We’re proud to be a Disability Confident employer. If you need any adjustments to support your application or interview, just let us know. We’re committed to helping you perform at your best.

At MAG, every journey matters. Our Colleague Communities play a big part in that: Women’s Network, Embrace (Race & Ethnicity), Fly with Pride (LGBTQIA+), Mind Matters (Mental Health), PACT (Parents & Carers), RespectABILITY (Disability & Neurodiversity), and the CAVU Global ID&E Affinity Group.