Information Security Manager

ZeroAvia; Kemble; On-site; GBP 65,000 - 85,000; Full time

Job summary

A pioneering aviation technology company based in Kemble is seeking an experienced Information Security Manager to shape security strategies for cutting-edge hydrogen-electric technologies. The ideal candidate will possess significant experience in information security, particularly in regulated environments like aerospace. Key responsibilities include establishing ISMS compliant with aviation standards, leading risk management initiatives, and ensuring compliance with cybersecurity regulations, while fostering a security-focused culture throughout the organization.

Benefits

Private health and dental care

Mental health support

Free lunch and healthy snacks

Sports, games and culture clubs

Stock options

5 hours of free flying lessons

25 days holiday plus public holidays

Free EV Charging

Salary Sacrifice Schemes

Weekly Spot Bonuses

Income Protection and Legal Support

Relocation Support

Qualifications

• Minimum 8 years of information security experience, with at least 3 years in aerospace.
• Proven experience implementing ISMS frameworks.
• Deep understanding of aviation cybersecurity regulations.
• Experience with industrial control systems security.
• Demonstrated expertise in cybersecurity risk assessment.

Responsibilities

• Develop and execute comprehensive information security strategy.
• Establish and maintain an ISMS compliant with ISO 27001.
• Conduct cybersecurity risk assessments for aviation systems.
• Design and implement security architectures for aviation systems.
• Build and lead a high-performing information security team.

Skills

Information security management

Aviation cybersecurity regulations

Risk assessment

Stakeholder management

Cybersecurity frameworks

Education

Degree in Cybersecurity, Engineering, or related field

Tools

ISMS frameworks (ISO 27001)

Security architecture design tools

Job description

At ZeroAvia, we're not just revolutionising aviation—we're securing the future of clean flight. As we pioneer hydrogen-electric propulsion systems that will transform commercial aviation, we need a visionary Information Security Manager to protect our groundbreaking technology, intellectual property, and operational infrastructure. This is your opportunity to shape cybersecurity strategy at the forefront of sustainable aviation while safeguarding systems that will decarbonise the skies.

Join us in building robust security frameworks that will enable ZeroAvia to achieve certification, scale operations, and maintain the trust of aviation authorities, partners, and passengers as we deliver zero-emission flight solutions.

We are seeking an experienced Information Security Manager to lead our comprehensive information security programme across our UK operations. In this critical role, you will develop and implement security strategies that protect ZeroAvia's hydrogen-electric propulsion technologies, certification data, and operational systems while ensuring compliance with aviation cybersecurity regulations including EASA EAR Part-IS, CAA requirements, and emerging aviation security standards.

This position requires deep expertise in cybersecurity frameworks, aviation security requirements, and the ability to balance innovation with robust risk management in our fast-paced, cutting-edge environment.

Essential Experience:

• Minimum 8 years of information security experience, with at least 3 years in aerospace, aviation, or highly regulated industries
• Proven experience implementing and managing ISMS frameworks, preferably ISO 27001 certification
• Deep understanding of aviation cybersecurity regulations, including EASA requirements, CAA frameworks, or similar aviation security standards
• Experience with industrial control systems security, particularly in safety-critical environments
• Demonstrated expertise in cybersecurity risk assessment and management methodologies specific to engineering and manufacturing environments

Technical Expertise:

• Strong knowledge of cybersecurity frameworks (NIST, ISO 27001, aviation-specific standards)
• Experience with security architecture design for complex technical systems
• Understanding of aviation safety management systems and their integration with cybersecurity programmes
• Familiarity with certification processes and regulatory compliance in aerospace or similar sectors
• Knowledge of threat detection, incident response, and security monitoring technologies

Leadership & Communication:

• Proven ability to lead security programmes in fast-paced, innovative technology companies
• Excellent stakeholder management skills, with ability to influence at all organisational levels
• Strong communication skills for presenting security strategies to technical and executive audiences
• Experience building security teams and developing cybersecurity culture within engineering organisations

Preferred Qualifications:

• Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor, or aviation security qualifications
• Experience with hydrogen infrastructure, electric propulsion systems, or clean energy technologies
• Knowledge of aviation certification processes (FAA, EASA, CAA)
• Background in aerospace, defence, or other safety-critical industries
• Degree in Cybersecurity, Engineering, or related field

Main Responsibilities

Security Strategy & Leadership:

• Develop and execute ZeroAvia's comprehensive information security strategy, aligning with aviation safety and certification requirements
• Establish and maintain an Information Security Management System (ISMS) compliant with ISO 27001 and aviation-specific cybersecurity standards
• Lead cross-functional security initiatives across engineering, operations, and certification teams
• Provide security expertise to support ZeroAvia's certification programmes with FAA, CAA, and EASA

Risk Management & Compliance:

• Conduct comprehensive cybersecurity risk assessments specific to aviation systems and hydrogen-electric propulsion technologies
• Ensure compliance with EASA EAR Part-IS regulations and UK aviation cybersecurity requirements
• Implement security controls for critical aviation systems, including propulsion control systems, flight test data, and certification documentation
• Manage security aspects of supplier relationships and third-party integrations

Security Architecture & Implementation:

• Design and implement security architectures for aviation systems, including industrial control systems and hydrogen infrastructure
• Establish security monitoring, threat detection, and incident response capabilities
• Oversee security measures for intellectual property protection, particularly around proprietary hydrogen-electric technologies
• Manage security requirements for certification and regulatory data integrity

Team Development & Governance:

• Build and lead a high-performing information security team aligned with ZeroAvia's mission
• Establish security awareness programmes and training for all staff, emphasising aviation-specific security requirements
• Develop security policies, procedures, and standards tailored to the aviation sector
• Collaborate with engineering teams to embed security by design principles in hydrogen-electric propulsion systems

At ZeroAvia, we’re clean sky thinkers. For the world to achieve truly clean, guilt-free flight, we need a scalable solution; hydrogen-electric powertrains. As a leader in zero-emission aviation and a UK Jet Zero Council member, we’re designing and commercialising hydrogen-powered solutions that will positively impact the future of aviation, global connectivity, and the world.

Engineering designs our next-generation hydrogen electric engines. Working across Hydrogen, Propulsion and Integration divisions, they solve technical problems and help decarbonize aviation by finding solutions for electric propulsion, hydrogen storage, fuel cell technology, power distribution, thermal management and more.

Join us at Cotswold Airport, home to some of our aircraft and the workplace of many ZeroAvians. Located just outside the historic market town of Cirencester, you’ll experience a workspace built by engineers for engineers. This is a high-velocity and fast-paced environment with good links to the M4 and M5, so it’s fitting that it’s also our UK Head Office.

Why Join Us?

We want to help you be your best self, at work and at home, that’s why we provide our employees with…

• Private health and dental care – get access to services and support when you need them. Add your family members too*

• Mental health support – enjoy a culture where positive mental health is front of mind with our trained Mental Health First Aiders, Employee Assistance Programmes and wellbeing support.
• Free lunch and healthy snacks – keeping you fueled up so you can help us deliver the technology of the future**
• Sports, games and culture clubs – connect and keep fit with other ZeroAvians by joining one of our subsidised clubs – such as, running, cycling, padel, trivia, theatre and gardening.

We also offer:

• Stock options – so youcan share in our success.
• 5 hours of free flying lessons
• 25 days holiday, plus public holidays – to help you manage your work-life balance.
• Free EV Charging and membership in our EV Club.
• Salary Sacrifice Schemes for EV Club, Curry's Tech, Cycle to Work, and Ikea Furniture.
• Weekly Spot Bonuses to reward excellence.
• Income Protection and Legal Support for peace of mind.
• Relocation Support to make your move seamless.

Diversity and Inclusion

As an emergent company shaping the aviation industry, we know that diversity fuels success and unlocks potential. We embrace being an equal-opportunity employer and actively seek individuals from diverse backgrounds. We value the multitude of skills, perspectives, and mindsets everyone can bring to the table. These experiences ignite creativity, originality, and growth. We proudly reject discrimination in all forms, including that based on race, religion, color, national origin, sex, gender expression, sexual orientation, age, marital status, veteran status, or disability status.