Senior Cyber Security Analyst

Senior Cyber Security Analyst (Cyber Business Partnering)

Closing date
- Sunday 16th August 2026

NATS is the UK’s leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products and solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe.

The Cyber Business Partnering team works across the organisation to ensure cyber security is understood, embedded and aligned with business priorities. As the team continues to grow, we are seeking a Senior Cyber Security Analysts to join us.

The role offers the opportunity to work across a broad range of cyber security disciplines while helping the business understand and manage cyber risk. Depending on your experience and interests, you may contribute to areas including:

• First Line Assurance
• Technical Assurance
• Supply Chain Assurance
• Culture and Engagement

Whether you're a cyber security generalist, or looking to develop expertise in a particular area, you'll have the opportunity to make a real impact while building your skills across a varied and dynamic portfolio.

Our Senior Cyber Security Analysts are responsible for assessing, delivering, maintaining and maturing the security practices within the organisation, ensuring that security plans, policies and practices reflect corporate standards and good practices, support the business functions, with focus on continuous improvement.

This role will support and develop Cyber Security Analysts, initiating and managing their own work items and acting as a subject matter expert in their focus security domains.

• Identify threats and risks, to shape and inform the development and implementation of mitigating strategies that strengthen NATS' security levels.
• Develop and maintain security standards, policies, and procedures to ensure alignment with recognised frameworks e.g. ISO 27001 and NIST.
• Develop and maintain the risk assessment framework and risk register, to support risk assessment activities across the organisation.
• Collaborate with business units to identify and design changes and improvements, to address their security needs and promote compliance and capability development.
• Conduct assurance and measurement processes for organisational security capabilities, to produce insightful reports and guide remedial actions across relevant business areas.
• Plan and execute security improvement initiatives across business areas, to ensure consistent delivery and alignment with organisational security objectives.
• Provide technical guidance, support development to other members of the team, to ensure consistency in security practices.
• Monitor developments in security frameworks, regulation, and legislation, to advise on their implications and influence improvements to NATS' security processes.

You’ll ideally have:

• Degree in Cybersecurity, Information Security / related field (or equivalent experience).
• CISMP, ISO 27001 Lead Implementer or equivalent professional certification or experience.
• Demonstrated experience in delivering initiatives which develop capability and promote compliance with security obligations.
• Experience in evaluating complex security challenges across technical, process, and business domains, applying sound judgement to deliver pragmatic and effective solutions.
• Experience identifying, developing and implementing, risk mitigation plans, policies, processes and technical controls.
• Understanding and experience of applying industry standards e.g. ISO
  27001 and NIST.
• Demonstrates a solid understanding of security controls required to identify, assess and address information security or cyber vulnerabilities across the organisation.
• Works collaboratively across teams and disciplines, supporting colleagues and contributing to a positive team environment. Provides guidance and mentoring where appropriate.
• Communicates confidently and effectively with stakeholders at all levels, translating complex information into clear, actionable messages.
• Proactively takes…