Cyber Security Oversight Specialist

Select how often (in days) to receive an alert:

Date: 13 Aug 2026

Location: Gatwick, GB

Salary: £56,667 to £71,957 – (dependent on experience)

Contract Type: Permanent – Full-Time

Security Level: SC

Location: Gatwick – Hybrid - min 2 days in the office or industry visits per week.

Visa Restrictions: This position does not offer visa sponsorship

Closing Date:
Friday 28th August 2026

Screening Calls: w/c 31st Monday 2026

Interview Date:
From w/c Monday 14th September 2026

We are the UK's aviation and aerospace regulator and recognised as a world leader in its field. Our activities are diverse, enabling the aviation industry to meet the highest safety standards, and we pride ourselves on our ability to adapt to the constantly evolving aviation environment.

Are you an experienced information security professional looking for a new challenge? Or perhaps you're keen to move from an internal consultancy, assurance, or IT audit role into a more outward-facing position where you can influence the future of cyber security in aviation? If so, this could be the opportunity for you.

The CAA Cyber Safety Oversight Team provides cyber security oversight across a range of aviation safety domains, including Aerodromes, Continuing Airworthiness, Air Traffic Management, and Flight Operations. We have built a highly collaborative environment where cyber specialists work alongside aviation experts to develop, implement, and continuously improve proportionate, risk-based oversight approaches.

Alongside our aviation safety responsibilities, the CAA as co-competent authority with the Department for Transport (DfT) for the Network and Information Systems Regulations 2018 (NIS) is responsible for regulatory oversight and post-incident investigations under NIS, delivered through the CAA's Cyber Security Oversight Process for Aviation (CAP
1753).

As an Aviation Cyber Oversight Specialist, you will play a pivotal role in delivering the UK Aviation Cyber Security Strategy and the CAA's Cyber Security Oversight Strategy. You will help drive the evolution of our cyber oversight capabilities, ensuring our approach remains proactive, intelligence-led, and aligned with the Regulator's Code, Growth Duty, and CAA Regulatory Principles.

Working at the forefront of aviation cyber security, you will contribute to the development and application of cyber security regulations, standards, and guidance that help maintain the safety, security, and resilience of the UK's aviation sector.

A key part of the role will involve shaping and delivering the CAA's cyber oversight activities. This includes leading and participating in audits and inspections of aviation organisations, assessing the cyber risks associated with systems critical to aviation safety, security and resilience, reviewing cyber security self‑assessments and evidence and formulating an expert opinion on an organisation cyber security posture, monitoring the implementation of corrective actions, and holding organisations accountable for addressing identified deficiencies.

The successful candidate will have a strong background in information technology, operational technology, cyber security, or senior GRC roles, with practical knowledge of information security frameworks and controls, and the ability to evaluate technical documentation and controls implementation

Strong stakeholder engagement skills are essential. You will be comfortable working with a diverse range of organisations and individuals, from technical specialists and senior leaders to government and industry representatives and will be able to communicate complex concepts clearly and effectively to different audiences.

• To work in collaboration with CAA safety and security colleagues to establish and mobilise an ongoing oversight regime that ensures aviation organisations are meeting cyber security requirements according to their applicable regulations
• Perform initial and ongoing oversight activities predominantly in aviation safety, but also in aviation security and resilience where appropriate.
• Activities will include, but not limited to, audits (both onsite and remote), inspections,…