Cyber Security & ISMS Lead - Aerospace & GRC

Airbus; Prestwick; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Pension plan

33 days annual leave

Annual bonus

Life assurance

Virtual GP service

Wellbeing programme

Professional development

Free on-site parking

Job summary

Prestwick Aerosystems Limited in Prestwick, Ayrshire, is seeking a Cyber Security Manager to own the end-to-end GRC estate and oversee the delivery of digital security and compliance across the organisation. You will report to the Digital Security Officer and help establish our ISMS while maintaining Airbus compliance.

The role covers governance, risk management, policy development, and cross-functional collaboration with OT, IT, and supply chain, with focus on ISO 27001:2022, NIST CSF 2.0, and

Qualifications

• Extensive experience leading Information Security Management, GRC, or cyber operations in aerospace/defence/manufacturing.
• Proven track record delivering an enterprise ISMS.

Responsibilities

• Own the complete GRC estate and ARM portal, track risks and ROM plans, collect audit evidence.
• Build and sustain ISMS policy suite aligned with ISO 27001:2022 and Airbus directives.
• Maintain Airbus Cybersecurity compliance levels and manage internal audits and remediation plans.
• Lead cybersecurity maturity assessments using NIST CSF 2.0 and threat modelling.
• Align OT with IT security and ensure regulatory compliance (EASA Part-IS).

Skills

GRC leadership

Security governance

Threat modelling

Audits and compliance

Education

Security governance certification (CISM/CRISC/CISA/CISSP)

Tools

GRC platforms (FENCE, MetricStream)

Microsoft Defender XDR

Job description

Prestwick Aerosystems Limited in Prestwick, Ayrshire, is seeking a Cyber Security Manager to own the end-to-end GRC estate and oversee the delivery of digital security and compliance across the organisation. You will report to the Digital Security Officer and help establish our ISMS while maintaining Airbus compliance.

The role covers governance, risk management, policy development, and cross-functional collaboration with OT, IT, and supply chain, with focus on ISO 27001:2022, NIST CSF 2.0, and