Cyber Security Manager

With 80 million passengers passing through our airport each year, it takes hundreds of systems, platforms and networks to keep our airport running smoothly, 24 hours a day, 365 days a year.

Join us, and you'll thrive on the buzz of providing the technology, data, cyber and digital capabilities that run all the services you'd expect to see in a city, and more. Tech at Heathrow isn't typical. The scale and non‑stop nature of our airport make it truly unique.

Our Data, Digital and Technology team are leading the way in innovations that will make our airport more efficient, resilient and competitive in an increasingly digital marketplace, as well as keeping Heathrow safe and secure.

Every day will test your skills and give you the opportunity to make your mark. We're constantly looking for new ways to help Heathrow transform and grow, responding to the changing needs of passengers, colleagues and partner businesses.

It means the chance to work on a huge variety of inspiring projects and to develop in lots of exciting directions. Our team covers technology, cyber defence, data and digital, offering one‑of‑a‑kind careers you won't find anywhere else.

As a Cyber Security Manager – Supply Chain, you’ll play a vital role in protecting Heathrow’s digital ecosystem by ensuring that our suppliers and partners meet the highest standards of cyber security. You’ll work within the Cyber Security team, collaborating closely with Procurement, Legal, and Technology colleagues to manage third‑party risks and strengthen our overall cyber resilience.

This role is central to Heathrow’s mission to deliver a world‑class, safe, and sustainable airport. You’ll help shape how we assess, monitor, and improve supplier security practices, ensuring that every organisation we work with contributes to a secure and trusted supply chain. Success in this role means reducing risk exposure, improving supplier compliance, and embedding a culture of cyber awareness across Heathrow’s extended enterprise.

• Developing and implementing Heathrow’s supplier cyber risk management framework, ensuring alignment with NCSC and ISO 27001 standards.
• Conducting supplier security assessments and audits, identifying vulnerabilities, and driving remediation plans with internal and external stakeholders.
• Collaborating with Procurement and Legal teams to embed cyber security requirements into supplier contracts and onboarding processes.
• Monitoring supplier performance and compliance through continuous assurance activities and risk reporting.
• Supporting incident response activities involving suppliers, ensuring lessons learned are captured and improvements implemented.

• Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment.
• Strong understanding of third‑party risk management frameworks, ISO 27001, NIST, and NCSC guidance.
• Experience conducting supplier security assessments and managing remediation activities.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels.
• Analytical mindset with strong problem‑solving and decision‑making abilities.
• Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience).

Ideally you’ll also have

• Experience working in aviation, transport, or other regulated industries.
• Knowledge of Heathrow’s operational technology and digital systems landscape.
• Familiarity with supplier assurance tools and continuous monitoring platforms.

There’s something so special about working at the world’s most iconic airport. Its sights. Its sounds. Its constant air of excitement. Heathrow is an amazing backdrop to a…