Senior Cyber Security Analyst (Governance, Risk and Compliance)

NATS Limited; Swanwick; Hybrid; GBP 70.000 - 95.000; Vollzeit

Zusammenfassung

NATS Ltd is seeking a Senior Cyber Security Analyst to lead governance, risk and compliance activities, shaping risk management practices and security controls across the organisation.

The role requires translating complex cyber risks into actionable business messages, developing security standards, and guiding junior analysts while collaborating with diverse stakeholders to strengthen the security program.

Qualifikationen

• Degree in Cybersecurity or related field, or equivalent experience.
• CISMP or ISO 27001 Lead Implementer certification or equivalent.
• Experience delivering initiatives to develop capability and promote compliance with security obligations.
• Experience evaluating complex security challenges across technical, process, and business domains, applying sound judgement.

Aufgaben

• Develop and maintain cyber security risk management frameworks and processes.
• Work with risk owners to create proportionate risk treatment and remediation plans.
• Challenge risk assessments, control effectiveness and proposed risk acceptance.
• Translate technical risks into clear business impacts for stakeholders and leaders.
• Develop and maintain security standards, policies, and procedures aligning with ISO 27001 and NIST.
• Provide guidance and mentoring to junior analysts and collaborate across teams.

Ausbildung

Degree in Cybersecurity / Information Security

Jobbeschreibung

Senior Cyber Security Analyst (Governance, Risk and Compliance)

NATS is the UK’s leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products and solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe.

Job Purpose:

Our Governance Risk and Compliance Team are looking for a Senior Cyber Security Analyst to play a key role in protecting critical business services through effective cyber risk management. You will have a strong understanding of cyber security risk management, with a particular focus on the development and practical application of risk frameworks and methodologies. Crucially, you will be able to translate complex technical risks into clear business impacts and communicate them effectively to technical teams, business stakeholders and senior leaders. You will also contribute to the development and maintenance of security policies, standards and controls, ensuring that identified risks are addressed through clear, proportionate and practical security requirements.

Working with a diverse range of stakeholders, you’ll provide expert guidance, challenge assumptions, and help embed a risk-based approach to cyber security across the organisation.

Our Senior Cyber Security Analysts are responsible for assessing, delivering, maintaining and maturing the security practices within the organisation, ensuring that security plans, policies and practices reflect corporate standards and good practices, support the business functions, with focus on continuous improvement.

This role will support and develop Cyber Security Analysts, initiating and managing their own work items and acting as a subject matter expert in their focus security domains.

Other duties include

• Developing, implementing and improving cyber security risk management frameworks, methodologies and processes.
• Working with risk owners to develop proportionate risk treatment and remediation plans.
• Constructively challenging risk assessments, control effectiveness and proposed risk acceptance.
• Understanding the relationship between threat, vulnerability, control effectiveness, likelihood, impact and residual risk.
• Using recognised approaches and frameworks such as ISO/IEC 27001 and ISO/IEC 27005, NIST Cybersecurity Framework, NIST SP 800-30 or the NCSC Cyber Assessment Framework (CAF).
• Develop and maintain security standards, policies, and procedures to ensure alignment with recognised frameworks e.g. ISO 27001 and NIST.
• Conduct assurance and measurement processes for organisational security capabilities, to produce insightful reports and guide remedial actions across relevant business areas.
• Plan and execute security improvement initiatives across business areas, to ensure consistent delivery and alignment with organisational security objectives.
• Provide technical guidance, support development to other members of the team, to ensure consistency in security practices.
• Monitor developments in security frameworks, regulation, and legislation, to advise on their implications and influence improvements to NATS’ security processes.

Essential Qualifications, Skills and Experience

You’ll ideally have:

• Degree in Cybersecurity, Information Security / related field (or equivalent experience).
• CISMP, ISO 27001 Lead Implementer or equivalent professional certification or experience.
• Demonstrated experience in delivering initiatives which develop capability and promote compliance with security obligations.
• Experience in evaluating complex security challenges across technical, process, and business domains, applying sound judgement to deliver pragmatic and effective solutions.
• Experience in implementing and improving cyber security risk management frameworks, methodologies and processes
• Experience identifying, developing and implementing, risk mitigation plans, policies, processes and technical controls.
• Understanding and experience of applying industry standards e.g. ISO27001 and NIST.
• Demonstrates a solid understanding of security controls required to identify, assess and address information security or cyber vulnerabilities across the organisation.
• Works collaboratively across teams and disciplines, supporting colleagues and contributing to a positive team environment. Provides guidance and mentoring where appropriate.
• Communicates confidently and effectively with stakeholders at all levels, translating complex information into clear, actionable messages.
• Proactively takes ownership of personal development, setting goals and seeks opportunities to learn. Encourages and supports team growth through knowledge sharing and mentoring.

Additional Vacancy Information:

We are proud to offer a fantastic total reward package to help you thrive both personally and professionally - for more information on what NATS can offer you please visit - Why NATS?

Please note: All staff at NATS are subject to UK Security Vetting and Clearance (SC) and must maintain valid clearance throughout employment. We are unable to progress applications where an applicant does not meet eligibility requirements for clearance. For further guidance click here Security Clearance - NATS

We have adopted agile working to provide greater flexibility and increased choice over working arrangements, with the opportunity for this role to work in our modern office facilities as well as remotely. We also welcome discussions on flexible and part-time working arrangements.Find out more here .

If you share our passion to advance aviation and keep the skies safe – we would like to hear from you whatever your age, sex, race, faith, sexual orientation, gender identity, gender expression, visible or invisible disability. Individuals that bring different perspectives, skills, life experiences and backgrounds help us be at the forefront of our industry.