Cyber Delivery Assurance Lead

A career without limits

As the nation’s flag carrier, we take great pride in connecting Britain with the world and the world with Britain.

It’s something we’ve been doing for over 100 years, ever since we launched the world’s first international scheduled air service between London and Paris.

This originality has been in our blood since day one. It’s the spirit we share with the people that fly with us, our partners, and our colleagues.

So, whether you are a reassuring voice on the end of a phone, a smile at the door, under a wing keeping the turbines spinning or landing us gently in far‑flung places, a job at British Airways is yours to make.

We know great things can happen when you’re inspired to think big and bring your ambition to work every day, which is why, at British Airways, the sky is never the limit.

Cyber Delivery Assurance Lead

As Cyber Delivery Assurance Lead, you’ll act as the British Airways cyber representative embedded within product delivery teams, ensuring cyber risk is actively managed and security controls are designed, implemented and operating effectively across programmes and products.

This is a hands‑on cyber assurance role. You’ll be expected to bring strong practical experience of applying cyber security controls, assessing real systems and architectures, and working directly with delivery teams to embed security by design — not simply reviewing documentation or providing high‑level guidance.

Reporting to the Head of Cyber & IT Risk, you’ll work closely with BA Tech Delivery teams, the BA Cyber Team and the IAG Cyber Security Office to ensure solutions meet BA’s risk appetite and regulatory obligations.

• Provide delivery assurance to ensure programmes and products operate within BA’s cyber risk appetite
• Work hands‑on with delivery teams to embed security by design and ensure appropriate cyber controls are implemented and operating effectively
• Interpret and apply cyber security policies, standards and guidelines across product releases and ongoing maintenance
• Conduct threat and risk assessments across varied technology stacks and define proportionate mitigating controls
• Provide authoritative advice on the practical application of security controls, legislation and regulatory requirements
• Act as the cyber point of contact for programmes and products, supporting secure delivery end‑to‑end
• Engage proactively with the IAG Cyber Security Office assurance and architecture functions to ensure consistency and best practice
• Identify, manage and report cyber risks and exceptions throughout the product lifecycle
• Support cyber governance forums and provide clear, accurate updates on security deliverables
• Promote cyber risk awareness and support security awareness initiatives across the organisation

• Strong hands‑on cyber security experience, with the ability to assess real systems and influence secure design and delivery decisions
• Broad technical understanding of cyber security controls across multiple technology domains
• Confidence working directly with engineers, architects and delivery teams to resolve security issues pragmatically
• Ability to balance standards compliance with practical delivery constraints
• Excellent stakeholder management skills, with experience influencing at senior levels
• Calm, resilient approach in fast‑paced and changing environments
• Clear, positive communicator who can explain cyber risk and controls effectively

• Proven experience providing cyber security assurance or secure delivery support in complex environments
• Demonstrable experience performing threat and risk assessments and defining mitigating controls
• Experience working in regulated environments with strong cyber and compliance requirements
• Knowledge of cyber security frameworks and regulatory requirements such as NIST, PCI DSS, GDPR and NIS
• Experience in agile delivery environments is advantageous
• Relevant cyber security qualifications (e.g. CISSP, ISO
  27001 Lead Implementer, SANS GIAC or equivalent) desirable

We believe that all the people who work with us should feel valued for the part they play. It’s one of the reasons our rewards go far…