Cyber Security Consultant

Hays; Oxford; On-site; GBP 100,000 - 125,000; Full time

Job summary

A leading company in the airline industry is seeking a Cyber Delivery Assurance Lead to ensure secure product delivery and maintain effective cyber controls. The role involves working closely with various teams to implement security policies and manage stakeholder relationships. Ideal candidates will have a strong background in cyber security and leadership skills.

Qualifications

• Broad technical knowledge of cyber security controls.
• Experience in agile delivery environments.

Responsibilities

• Provide assurance that product delivery meets risk appetite.
• Manage senior stakeholder relationships across organizations.
• Ensure secure delivery of programmes by embedding Cyber Security policies.

Skills

Leadership

Communication

Risk Management

Change Management

Education

CISSP

ISO27001 Lead Implementor

SANS GIAC

Job description

Get AI-powered advice on this job and more exclusive features.

I talk about Recruiting and Hiring * Perfectly Imperfect * Introvert living in industry of Extroverts

I hope you’re okay! Are you ready for your next professional adventure?

We share your motivation to progress your career and achieve your ambitions – so we want to let you know about the latest Cyber Delivery Assurance Lead - London role. Check out the details for this vacancy with a world-leading airline company below:

Location: Waterside, London

Hours: Monday to Friday (37.5 hours a week)

Rate: £700-£750 per day through UMBRELLA (Inside IR35)

Job purpose:

• This role reports to the Head of Cyber & IT Risk, working closely with client Tech Delivery Teams, the client Cyber Team, and the client Cyber Security Office. Act as the Client Cyber representative on product delivery and operate as part of “product” teams, providing advice on the implementation of cyber security policies and standards across all releases and ongoing maintenance.

Accountabilities:

• Provide assurance to the Head of Cyber & IT Risk that product delivery and maintenance meet the client’s risk appetite and that controls are operating effectively.
• Embed security by design with proportionate cyber controls aligned to risk.
• Manage senior stakeholder relationships across multinational organizations, including third-party suppliers and delivery partners.
• Ensure secure delivery of programmes by interpreting and embedding Cyber Security policies, standards, guidelines, and procedures within the product team framework.
• Engage proactively with the client Cyber Security Office (CSO) project assurance and architecture teams to ensure best cyber practices are followed.
• Provide authoritative advice on security controls, legislative, and regulatory requirements.
• Advise users on risk management, promote awareness, and support cyber awareness programs.

Skills:

• Ability to undertake threat and risk assessments across varied technology stacks, identifying suitable controls.
• Strong leadership, communication, influence, and persuasion skills at senior levels, with the ability to align stakeholder groups around a common vision.
• Initiate and manage change to secure the future direction of the client.
• Prioritize across multiple products based on overall delivery strategy.
• Work effectively under pressure in a dynamic environment.

Qualifications:

• Broad technical knowledge of cyber security controls, evidenced by qualifications such as CISSP, ISO27001 Lead Implementor, SANS GIAC, or equivalent.
• Knowledge of NIST, PCI DSS, GDPR, NIS, and NCSC cyber guidance.
• Experience in agile delivery environments is highly advantageous.
• Specific cyber expertise in areas like Cloud security, network security, digital security, infrastructure security, security by design, or security architecture.
• Experience working in regulated environments with specific cyber requirements.

Key performance indicators:

• Engagement in programme and product governance to ensure secure delivery.
• Providing regular, accurate security updates to stakeholders.
• Identifying, reporting, and managing cyber risks and exceptions throughout the product lifecycle.

Start Date: ASAP

Interested? Please reply with an up-to-date CV.

If it’s not quite right but you know someone who might be interested, please let us know.

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology and Other

Industries

• Airlines and Aviation, Aerospace Components