Cyber Delivery Assurance Lead, 3 month rolling, Heathrow 3 days

<p class="text-muted mb-3">Cyber Delivery Assurance Lead - (Leading UK Airline - 3 month initial contract/rolling - 3 days per week in Heathrow)</p>

<p class="text-muted mb-3">As a Cyber Delivery Assurance Lead, where you'll play a pivotal role reporting to a Cyber Delivery Assurance Principal. Collaborating closely with Digital Delivery leadership and teams, the Cyber Team, and the Cyber Security Office, you'll oversee multiple domains or tribes, ensuring effective assurance processes and embedding security within our operations.</p>

<p class="text-muted mb-3">What you'll do:</p>

<p class="text-muted mb-3">Provide assurance to the Cyber Delivery Assurance Principal that product delivery and maintenance meet's the risk appetite and that controls are operating effectively.</p>

<p class="text-muted mb-3">Successfully embedding security by design with proportionate appropriate cyber controls aligned to risk.</p>

<p class="text-muted mb-3">Senior stakeholder management (negotiation and influencing) across multinational organisations, including third party suppliers and delivery partners.</p>

<p class="text-muted mb-3">Take full responsibility for the secure delivery of programmes, by assisting the product team by interpreting and embedding Cyber Security policies, standards, guidelines and procedures to an agreed framework against all product team deliverables.</p>

<p class="text-muted mb-3">May engage with the Cyber Security Office (CSO) project assurance and architecture functions, ensuring consistency and best cyber practice is adhered to.</p>

<p class="text-muted mb-3">Provide authoritative advice and guidance on the application and operation of all types of security controls including legislative or regulatory</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Advise users on risk management and reduction and promote awareness in conjunction with cyber awareness programmesWhat you'll bring:</p>

<p class="text-muted mb-3">Ability to undertake threat and risk assessments across varied technology stacks, identifying suitable mitigating controls.</p>

<p class="text-muted mb-3">Demonstrates clear leadership and an ability to communicate, influence and persuade across the organisation at senior levels, leading by example and aligning stakeholder groups around a common vision.</p>

<p class="text-muted mb-3">Initiates and manages change to help secure the future direction.</p>

<p class="text-muted mb-3">Prioritisation across multiple products, based on overall product team structure and delivery strategy.</p>

<p class="text-muted mb-3">Strong ability to work under pressure in a changing environment. Key enablers Enabling to embed security by design. Supporting active risk management. Key performance indicatorsYour experience:</p>

<p class="text-muted mb-3">Broad technical knowledge of cyber security controls demonstrated by attainment of appropriate qualifications e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent. Any AI certification would be a bonus.</p>

<p class="text-muted mb-3">Knowledge of the NIST framework, AI Security Governance, PCI DSS, GDPR and NIS as well as NCSC cyber guidance.</p>

<p class="text-muted mb-3">Experience working in an agile delivery environment would be highly advantageous.</p>

<p class="text-muted mb-3">Specific cyber knowledge and demonstrable experience in at least one of the following areas: Cloud security, network security, digital security (multi-platform), infrastructure security, security by design, security architecture and AI security</p>

<p class="text-muted mb-3">Experience working in a regulated environment with specific cyber</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements that require interpretation and application.Guidant, Carbon60, Lorien & SRG - The Vertage Group Portfolio are acting as an Employment Business in relation to this vacancy</h5>