Digital Safety Risk and Assurance Specialist

easyJet Airline Company PLC; London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading UK airline is seeking a Digital Safety Risk and Assurance Specialist to manage cybersecurity risks in a hybrid role based in Luton. You will work closely with teams to ensure compliance and improve risk management frameworks. Ideal candidates have relevant cybersecurity qualifications and prior experience in risk management. This role offers competitive pay, benefits, and the opportunity to work within a dynamic team.

Benefits

Competitive base salary

Up to 20% bonus

Flexible benefits package

Excellent staff travel benefits

Qualifications

• Experience in an information security role managing risk.
• Essential skills as identified in the job specification.

Responsibilities

• Deliver the risk management framework for cyber security risks.
• Capture relevant risk information across multiple business areas.
• Present findings at risk forums to support risk treatment.

Skills

Effective communication skills

Analytical and systematic issue resolution

Ability to plan and monitor work within deadlines

Education

CRISC or similar qualification

CISSP or COMPTIA Security +

Information Security or industry relevant qualifications

Job description

Overview

Job Description - Digital Safety Risk and Assurance Specialist (16298)

Digital Safety Risk and Assurance Specialist (16298)

Role

Digital Safety Risk and Assurance Specialist — Hybrid/Luton

Company

When it comes to innovation and achievement there are few organisations with a better track record. Join us and you’ll be able to play a big part in the success of our highly successful, fast-paced business that opens up Europe so people can exercise their get-up-and-go. With over 320 aircraft flying over 1000 routes to more than 30 countries, we’re the UK’s largest airline, the second largest in Europe and the eighth largest in the world. Flying over 90 million passengers a year, we employ over 14,000 people. Its big-scale stuff and we’re still growing.

Team

The role is situated in a team of cyber security professionals and works closely with the wider business to ensure that the principles of Digital Safety are as engrained as Aircraft Safety. This means close alignment to Operational, Commercial along with Regulatory and Audit functions. The role requires working closely with the Senior Digital Safety Risk Manager, the Head of Digital Safety Assurance and the Technical Security and Business Partner functions to support the Digital Safety vision.

Job Purpose

The risk and assurance specialist is responsible for delivering our risk management framework through identifying, capturing and measuring cyber security risks within easyJet. This role encompasses working with multiple diverse business areas to capture the relevant information that results in the representation of well-defined risk information to support informed decisions in the relevant forums. This role supports the overall Digital Safety Assurance team’s objectives and provides visibility of key information relating to our regulatory compliance or control maturity.

Job Accountabilities

• Operate the Digital Safety risk framework to assess and record cyber risk within easyJet.
• Work with multiple functions ranging from technical IT through to business facing functions to capture the full spectrum of related risk information.
• Operate the digital safety supplier assurance process to understand and capture risks related to our supply chain.
• Identify and capture potential gaps in our regulatory compliance environment and work with the Digital Safety Compliance Manager and the Data Protection team to resolve.
• Identify and capture information relating to our Data Governance framework and work with the Digital Safety Data Management Manager to resolve.
• Work with the IT Quality and Risk function to align on the IT risk relevant areas when dealing with Digital Safety risks.
• Present findings at relevant risk forums to support the treatment of identified risks.
• Provide training and advice to colleagues in the Cyber Governance, Compliance, Assurance and Risk team, the wider LC&R team and other departments on the use of the risk methodology to encourage consistent risk measurement and reporting across the company.
• Update the risk register of information assets with risks associated with each asset.
• Maintain the risk register of exceptions, assess and record the risk associated with any exceptions.
• Develop and maintain bow-tie models of key risks which tie in with other team member’s measurements of control effectiveness.
• Model statistical risk models based on risk models (e.g. Monte Carlo analysis).
• Maintain up to date awareness of the threat landscape and how it affects the probability of risk events occurring.

Requirements of the Role

• Previously worked in a similar information security role and other complementary business roles where the management of some type of risk (e.g. product, project) formed part of the role’s responsibilities.
• Candidates must have the essential skills identified.

Business skills

• Demonstrates effective communication skills.
• Plans, schedules and monitors own work (and that of others where applicable) competently within limited deadlines and according to relevant legislation, standards and procedures.
• Contributes fully to the work of teams. Appreciates how own role relates to other roles and to the business of the employer or client.
• Demonstrates an analytical and systematic approach to issue resolution.
• Takes the initiative in identifying and negotiating appropriate personal development opportunities.
• Understands how own role impacts security and demonstrates routine security practice and knowledge required for own work.

Ideal Qualifications

• CRISC or similar (eg Institute of Risk Management)
• CISSP, COMPTIA Security + or other security qualification
• Information Security or industry relevant qualifications

Location & Hours of Work

This full time role is a Hybrid work location requiring 2 working days in our Luton Airport office per week, and will be 40 hours per week.

What you’ll get in return

• Competitive base salary
• Up to 20% bonus
• BAYE, SAYE & Performance share schemes
• Flexible benefits package
• Excellent staff travel benefits

About easyJet

At easyJet our aim is to make low-cost travel easy – connecting people to what they value using Europe’s best airline network, great value fares, and friendly service. It takes a real team effort to carry over 90 million passengers a year across 35 countries. Whether you’re working as part of our front-line operations or in our corporate functions, you’ll find people that are positive, inclusive, ready to take on a challenge, and that have your back. We call that our ‘Orange Spirit’, and we hope you’ll share that too.

Apply

Complete your application on our careers site.

Reasonable Adjustments
At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at [e-mail]. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

Business Area

Legal

Primary Location