Cyber Security Manager

Heathrow Group; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Performance-based bonuses

Market-leading pensions

Private health insurance

Learning and development opportunities

Hybrid working

Job summary

Heathrow is seeking a Cyber Security Manager – Supply Chain to protect our digital ecosystem by ensuring supplier and partner security meets the highest cyber standards. You will work with Procurement, Legal and Technology colleagues to manage third‑party risks and strengthen cyber resilience across Heathrow’s extended enterprise.

You will shape how we assess, monitor and improve supplier security practices, drive remediation plans, and foster a culture of cyber awareness to reduce risk and

Qualifications

• Proven experience in cyber security risk management within complex supply chains or critical infrastructure.
• Strong knowledge of third‑party risk frameworks, ISO 27001, NIST and NCSC guidance.
• Experience conducting supplier security assessments and remediation management.
• Excellent stakeholder management and communication skills across levels.

Responsibilities

• Develop and implement Heathrow’s supplier cyber risk management framework aligned with NCSC and ISO 27001 standards.
• Conduct supplier security assessments and audits, identify vulnerabilities, and drive remediation plans with internal and external stakeholders.
• Collaborate with Procurement and Legal to embed cyber security requirements into supplier contracts and onboarding processes.
• Monitor supplier performance and compliance through continuous assurance activities and risk reporting.
• Support incident response activities involving suppliers and capture lessons learned for improvements.

Skills

Cyber risk management

Third‑party risk

ISO 27001/NCSC guidance

Supplier assessments

Stakeholder management

Analytical thinking

Certifications (CISSP/CISM/CRISC)

Tools

ISO 27001

NIST

NCSC guidance

Job description

Introduction

With 80 million passengers passing through our airport each year, it takes hundreds of systems, platforms and networks to keep our airport running smoothly, 24 hours a day, 365 days a year.

Join us, and you'll thrive on the buzz of providing the technology, data, cyber and digital capabilities that run all the services you'd expect to see in a city, and more. Tech at Heathrow isn't typical. The scale and non‑stop nature of our airport make it truly unique.

Our Data, Digital and Technology team are leading the way in innovations that will make our airport more efficient, resilient and competitive in an increasingly digital marketplace, as well as keeping Heathrow safe and secure.

Every day will test your skills and give you the opportunity to make your mark. We're constantly looking for new ways to help Heathrow transform and grow, responding to the changing needs of passengers, colleagues and partner businesses.

It means the chance to work on a huge variety of inspiring projects and to develop in lots of exciting directions. Our team covers technology, cyber defence, data and digital, offering one‑of‑a‑kind careers you won't find anywhere else.

Job Description

As a Cyber Security Manager – Supply Chain, you’ll play a vital role in protecting Heathrow’s digital ecosystem by ensuring that our suppliers and partners meet the highest standards of cyber security. You’ll work within the Cyber Security team, collaborating closely with Procurement, Legal, and Technology colleagues to manage third‑party risks and strengthen our overall cyber resilience.

This role is central to Heathrow’s mission to deliver a world‑class, safe, and sustainable airport. You’ll help shape how we assess, monitor, and improve supplier security practices, ensuring that every organisation we work with contributes to a secure and trusted supply chain. Success in this role means reducing risk exposure, improving supplier compliance, and embedding a culture of cyber awareness across Heathrow’s extended enterprise.

Your role will involve

• Developing and implementing Heathrow’s supplier cyber risk management framework, ensuring alignment with NCSC and ISO 27001 standards.
• Conducting supplier security assessments and audits, identifying vulnerabilities, and driving remediation plans with internal and external stakeholders.
• Collaborating with Procurement and Legal teams to embed cyber security requirements into supplier contracts and onboarding processes.
• Monitoring supplier performance and compliance through continuous assurance activities and risk reporting.
• Supporting incident response activities involving suppliers, ensuring lessons learned are captured and improvements implemented.

These Skills Are Essential

• Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment.
• Strong understanding of third‑party risk management frameworks, ISO 27001, NIST, and NCSC guidance.
• Experience conducting supplier security assessments and managing remediation activities.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels.
• Analytical mindset with strong problem‑solving and decision‑making abilities.
• Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience).

Ideally you’ll also have

• Experience working in aviation, transport, or other regulated industries.
• Knowledge of Heathrow’s operational technology and digital systems landscape.
• Familiarity with supplier assurance tools and continuous monitoring platforms.

About Us

There’s something so special about working at the world’s most iconic airport. Its sights. Its sounds. Its constant air of excitement. Heathrow is an amazing backdrop to a career filled with unique opportunities.

Every day, you’ll discover a world full of fresh possibilities and end the day buzzing with stories to tell, as you encounter people from all cultures, nationalities and experiences. A world full of pride for what we do and no end of exciting career prospects to explore.

It brings out the best in all of us. And inspires everyone to deliver on our ambitious plans. Together, we’re working to welcome millions more passengers while ensuring aviation can continue to be a force for good by leading global efforts in sustainability.

Join us on that journey and we'll help you achieve your ambitions too. Supporting you to learn, encouraging you to be yourself, backing you to achieve more than you might ever have imagined. Because there’s no place like Heathrow.

Our rewards

We offer competitive salaries and excellent benefits that will support you now and in the future. As well as performance‑based annual bonuses and our longer‑term Share in Success Bonus plans, we also offer generous annual leave allowances and market‑leading pensions. With family friendly policies, access to private health insurance and a wide range of wellbeing tools, we’ll support you to be at your best inside and outside work. And of course, we’ll provide varied learning and development opportunities too. Here you’ll find everything you need for a fulfilling career journey that can take you in exciting directions.

Working Location

Our Hybrid working approach offers the opportunity for colleagues in some roles to work from home for an average of two days a week, providing the flexibility to work in an agile way whilst ensuring we deliver for the operational needs of Heathrow. Working arrangements vary from team to team and will be confirmed during the recruitment process. You’ll need to be based in the UK and within a commutable distance to Heathrow.

Sustainable Travel to work

Heathrow’s Sustainable Travel Guide sets out easy and sustainable travel options that everyone can access.

Equal Opportunities

As an equal opportunities employer, we encourage applications from all. We believe that diverse talent makes us stronger – not least because we welcome passengers from all corners of the globe, every single day. Heathrow is an accessible place to work. With five diversity networks, we champion inclusivity and celebrate individuality.