Aviation Cyber Security Lead

NCC Group; Greater London; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension and Life Assurance

Community & Volunteering Programmes

Green Car Scheme

Cycle Scheme

Special Time Off for life events

Generous maternity and paternity leave

Job summary

NCC Group is seeking a Cyber Security Aviation Lead for its Global Transport Practice. This pivotal role focuses on aviation cyber security, requiring expertise in operational technology and safety-critical systems. You will engage with clients, mentor colleagues, and lead cyber engagements across aviation, rail, maritime, and automotive sectors. The position requires a strong understanding of aviation technologies, penetration testing, and regulatory frameworks. This is a hybrid role, based in Greater London, offering flexible working options and a comprehensive benefits package.

Qualifications

• Proven experience in the aviation ecosystem such as working with airports and airlines.
• Strong understanding of aviation operational technologies and safety-critical systems.
• Hands-on cyber security experience in regulated environments.

Responsibilities

• Act as the global aviation cyber security SME, providing expert knowledge.
• Lead and oversee cyber engagements within the aviation ecosystem.
• Perform and/or lead OT penetration testing and threat modeling.

Skills

Aviation operational technologies

Safety-critical systems

Penetration testing

Incident response

Threat modeling

Education

Certifications: GICSP, CISSP, CISM, OSCP

Tools

OT networks and architectures

Job description

Department & Location

Department: Cyber Services and Capabilities
Location: GBR London

Role & Locations

Cyber Security Aviation Lead (Global Transport)

Locations: Cheltenham, Manchester or London - Hybrid/Global Remit

Overview

We are seeking a highly skilled Cyber Security Aviation Lead to join our Global Transport Practice. This role will serve as the subject‑matter expert (SME) for aviation cyber security, covering operational technology (OT), safety‑critical aviation systems, and regulatory standards across the global aviation ecosystem.

You will play a pivotal role in shaping NCC Group’s aviation offerings, supporting delivery, mentoring colleagues, engaging clients, and driving growth in the aviation market. While aviation is the primary focus, the role also offers opportunities to work across rail, maritime, and automotive with full support from the wider transport team.

This is a client‑facing, collaborative, and technically hands‑on role suited to someone with solid aviation cyber experience who can also support business development activities.

Responsibilities

Aviation Cyber Security Leadership

• Act as the global aviation cyber security SME, providing expert knowledge of:
• Part‑IS and other aviation‑specific security frameworks
• ISA/IEC 62443 requirements and application to aviation OT
• Penetration testing techniques relevant to OT and aviation systems
• Avionics, airport infrastructure, ground systems, airline operational technologies

Lead and oversee cyber engagements within the aviation ecosystem, including:

• Airports
• ANSPs
• MNO
• Airlines
• OEMs
• Ground handling
• Avionics suppliers

• Safety‑critical OT networks and mission‑critical control systems

Technical Delivery

• Perform and/or lead OT penetration testing
• Threat modelling and risk assessments
• Security architecture review for aviation technologies
• Compliance assessments and gap analyses (Part‑IS, 62443, NIS2 where applicable)
• Oversee technical quality, ensuring best‑in‑class delivery to clients

Business Development & Practice Growth

• Support the creation and refinement of NCC Group’s aviation services and propositions
• Identify opportunities, create proposals, and participate in client meetings and presentations
• Represent NCC Group at aviation cyber conferences, industry forums, and working groups

Collaboration & Cross‑Transport Support

• Operate as part of the wider Global Transport Practice, contributing to multi‑modal cyber projects
• When required, step into cyber roles in rail, maritime, and automotive
• Work closely with colleagues across geographies to develop integrated cyber security solutions

Knowledge Sharing & Mentoring

• Coach and mentor internal consultants on aviation cyber security concepts, systems, and regulations
• Develop internal guidance, training materials, and workbooks/playbooks
• Promote a collaborative, high‑performance culture

Client Engagement

• Act as a trusted advisor to stakeholders at all levels
• Ensure exceptional client experience through clear communication, professionalism, and delivery excellence
• Build long‑term relationships with global aviation customers

Qualifications & Experience

Essential Experience & Skills

• Proven experience in the aviation ecosystem such as working with airports, airlines, OEMs, avionics manufacturers, and ANSPs
• Strong understanding of aviation operational technologies and safety‑critical systems

Knowledge of

• Part‑IS
• ISA/IEC 62443
• OT networks, architectures, and protocols
• Security risk assessment in safety‑critical environments

Hands‑on Cyber Security Experience

• Penetration testing (OT preferred)
• Threat modelling
• Incident response
• Architecture review
• Comfortable providing client‑facing advisory services
• Experience working in or with regulated environments
• Ability to simplify complex cyber concepts for diverse audiences

Desirable Skills

• Certifications: GICSP, CISSP, CISM, CRT/OSCP, CISA, CCSFP, 62443 certificates, CREST
• Background in engineering, avionics, or airport operations
• Experience with NIS/NIS2, EASA, FAA, ICAO cyber requirements
• Experience contributing to sales or pre‑sales cycles

Benefits

• Flexible Working: Balance your work and personal life with our flexible working options
• Generous Holiday Allowance: 25 days of holiday, plus bank holidays, with option to buy up to 5 additional days
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Pension, Life Assurance, and Share Save Scheme
• Community & Volunteering Programmes
• Green Car Scheme
• Cycle Scheme
• Special Time Off for significant life events
• Family Planning: Generous maternity and paternity leave, time off, and support for fertility treatments

EEO Statement

We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Pre‑Employment Notices

This role involves mandatory pre‑employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.