Cyber Risk Assurance Analyst

easyJet; Luton; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading low-cost airline in the UK is seeking a Cyber Risk Assurance Analyst to identify and manage cyber risks. You will collaborate closely with multiple teams to ensure regulatory compliance and assist in creating informative risk reports. The ideal candidate has relevant qualifications in Information Security or Risk Management and a strong analytical mindset, along with excellent communication skills.

Benefits

Competitive base salary

Up to 20% bonus

25 days holiday

7% pension

Life Insurance

Work Away Scheme

Flexible benefits package

Excellent staff travel benefits

Qualifications

• Experience in a cyber/information security compliance role preferred.
• Ability to work to deadlines, prioritize, and multi-task.
• Motivation to develop and maintain subject matter expertise.

Responsibilities

• Identify, analyze, and manage cyber risks effectively.
• Collaborate with multiple functions for comprehensive risk information.
• Prepare risk reports for senior management.

Skills

Communication skills

Analytical mindset

Teamwork

Report writing

Technical information understanding

Education

Information Security or Risk Management industry relevant qualifications

Job description

Overview

Cyber Risk Assurance Analyst

Luton/Hybrid

Company

When it comes to innovation and achievement there are few organisations with a better track record. Join us and you’ll be able to play a big part in the success of our highly successful, fast-paced business that opens up Europe so that people can exercise their get-up-and-go. With almost 300 aircraft flying over 1,000 routes to more than 32 countries, we’re the UK’s largest airline, the fourth largest in Europe and the tenth largest in the world. Set to fly more than 90 million passengers this year, we employ over 10,000 people. Its big-scale stuff and we’re still growing.

Team

The role situated in a team of cyber security professionals and working closely with the wider business to ensure that the principles of Digital Safety are as engrained as Aircraft Safety. This means close alignment to Operational, Commercial along with Regulatory and Audit functions. The role requires working closely with the Senior Digital Safety Risk Manager, the Head of Digital Safety Assurance and the Technical Security and Business Partner functions to support the Digital Safety vision.

The Cyber Risk Assurance Analyst role involves using data and analytical skills to identify, measure, and track cyber security risks within easyJet. This role requires collaboration with various business areas to gather the necessary information that enables the creation of informative risk reports, aiding decision making in the relevant forums supporting the Digital Safety Assurance team’s objectives and assists in shedding light on key areas pertaining to our regulatory compliance and control maturity.

Job Accountabilities

• Effectively leverage the Digital Safety risk framework to identify, analyse and manage cyber risk within easyJet, reflecting in-depth knowledge and experience.
• Actively engage with numerous functions, from technical IT to business facing functions, to gather a comprehensive range of risk-related information to demonstrate broad organisational understanding.
• Apply the Digital Safety assurance processes to accurately identify and register risks, demonstrating strategic initiative and proactively to perceive and register risks.
• Collaborate with the IT Quality and Risk function to identify significant areas of IT risk in the context of Digital Safety risks, demonstrating strong cross-functional teamwork.
• Report to senior management via appropriate forums on risk and assurance findings and risk treatment plans;
• Present and articulate findings at risk forums to facilitate the management of identified risks, showcasing nuanced understanding and strong communication skills;
• Maintain and update knowledge of the current threat landscape and evaluate its impact on the likelihood of risk events occurring, reflecting a commitment to knowledge development.
• Provide education, guidance and mentorship to colleagues outside of Risk and Assurance on the use of the risk methodology, fostering a companywide understanding of risk management and reporting.

Supporting Risk and Assurance:

• Tracking, management and reporting of risk, control and deviation remediation activities.
• Facilitate in the preparation of material for internal or external auditors.
• Preside over meetings, ensuring key decisions and discussions are minuted and action logs are maintained for future reference.
• Provide strategic support to the Digital Safety Risk and Assurance team to identify and capture gaps and information concerning our data governance framework.
• Responsible for updating the risk register of information assets with risks associated with each asset.
• Maintain the risk register of exceptions, assess and record the risk associated with any exceptions.
• Collating information from the control and information asset registers to provide internal compliance reports.

Key Business Skills Required

• Has appropriate communication skills for effective dialogue with customers, suppliers and partners.
• Is able to work in a team. Is able to plan, schedule and monitor own work within short time horizons. Demonstrates a rational and organised approach to work.
• Is fully aware of and complies with essential organisational security practices expected of the individual.
• Analytical mind-set.
• Motivation to develop and maintain subject matter expertise.
• Ability to work to deadlines, prioritize and multi-task
• Ability to manage own workload and meeting schedule
• Basic Report writing.
• Ability to absorb and learn technical information and communicate this in a way that is easy to understand

Desirable Skills/Experience

• Ideally previous work in a cyber / information security compliance role that has required a general broad understanding of controls. However business experience gained in a similar role combined with relevant information security / cyber security education would also be appropriate.
• Experience in a similar information security role or other business roles where risk management formed part of the role’s responsibilities.

Ideal Qualifications

Information Security or Risk Management industry relevant qualifications and awareness

What you’ll get in return

• Competitive base salary
• Up to 20% bonus
• 25 days holiday
• BAYE, SAYE & Performance share schemes
• 7% pension
• Life Insurance
• Work Away Scheme
• Flexible benefits package
• Excellent staff travel benefits

About easyJet

At easyJet our aim is to make low-cost travel easy – connecting people to what they value using Europe’s best airline network, great value fares, and friendly service. It takes a real team effort to carry over 90 million passengers a year across 35 countries. Whether you’re working as part of our front-line operations or in our corporate functions, you’ll find people that are positive, inclusive, ready to take on a challenge, and that have your back. We call that our ‘Orange Spirit’, and we hope you’ll share that too.

Apply

Complete your application on our careers site.

Reasonable Adjustments

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at [e-mail]. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.