Cyber Security Analyst, Advisory

Introduction

Together, we’re working to welcome millions more passengers, while ensuring aviation can continue to be a force for good by leading global efforts in sustainability. At Heathrow, you can be part of this – providing solutions that make every journey better for millions each year. That means ensuring we meet the changing needs of the passengers, colleagues and partners who use our airport to work, travel, trade, shop, eat, explore and connect.

Our Solutions team covers project management, process improvement, business change, technology, cyber defence, master planning, infrastructure and procurement. It brings together people with the skills to deliver prestigious and often large‑scale projects, from transforming terminals to making big reductions in our carbon emissions.

Every day will test your skills and give you the opportunity to make your mark. You might be working with the technology and data that power our city within a city, driving vital commercial agreements with everyone from retailers to airlines, or improving the unique infrastructure that includes everything from 200 buildings to 250 HV substations. It’s a collaborative environment, where you can rely on the support of the experts around you as you take on projects you’ll both take pride in and feel passionate about.

We’re looking for 2x Cyber Security Analysts, Advisory to join our Cyber Security Advisory team and help us embed ‘secure by design’ principles into everything we deliver. You’ll provide expert security advice to projects across the organisation, ensuring risks and vulnerabilities are identified early and addressed effectively.

In this role, you’ll conduct Cyber Security Impact Assessments, advise project teams, and track remedial actions to maintain and improve our security posture. Acting as both a subject matter expert and relationship manager, you’ll work with internal stakeholders and external partners to influence and guide decisions that prioritise security.

This is an exciting opportunity to join a forward‑thinking organisation, make a meaningful impact, and ensure security sits at the heart of every project we deliver.

• Deliver cyber security expertise to business areas and project teams, embedding security requirements into projects from the start.
• Perform Cyber Security Impact Assessments to identify risks and vulnerabilities, ensuring security best practices are built into solutions.
• Manage and report on the remediation of security risks, supporting leadership with clear updates on progress and posture.
• Act as a relationship manager and advisor, working with both technical and non‑technical stakeholders, including external partners.
• Educate and influence the business on security best practices, raising awareness and supporting secure development practices.
• Drive continuous improvement, staying up to date with new threats and approaches to strengthen the organisation’s resilience.
• Play a key role in embedding secure‑by‑design principles, ensuring security is at the heart of every project we deliver.

• Experience in Cyber Security, with proven ability to secure systems and projects across diverse disciplines.
• Demonstrated experience conducting Cyber Security Impact Assessments for large and complex projects, recommending effective mitigation strategies.
• Practical expertise embedding ‘secure by design’ principles throughout project development and operations.
• Experience in regulated sectors (aviation strongly preferred), with a sound understanding of compliance requirements (CAA, EASA, FAA).
• Strong knowledge of Cyber Security principles, frameworks, and best practices (e.g., NIST, ISO 27001).
• Skilled in risk management: conducting assessments, developing mitigation strategies, and tracking remediation actions.
• Proven ability to engage and influence stakeholders, communicating complex security issues clearly to both technical and non‑technical audience.
• Bachelor’s degree in Cyber Security, IT, Computer Science, or related field, with professional certifications (CISSP, CISM, ISO/IEC 27001 Lead Implementer) highly advantageous.
• Desirable:
  Experience in…