Cyber Security Analyst – Identity and Access Management

Overview

As part of Heathrow’s Cyber Security team, you safeguard digital identities and controlled access across a busy, global airport. You will protect systems and data while enabling secure, efficient operations for colleagues and partners. The role emphasizes managing identity risk, validating access requests, and supporting the business with robust IAM controls. You will work with a collaborative team to defend against evolving threats and contribute to Heathrow’s resilience and future readiness. This is a high-impact opportunity at a world-class hub shaping secure digital growth.

Pay / Benefits

• competitive salaries
• performance-based annual bonuses
• Share in Success Bonus plans
• generous annual leave allowances
• market-leading pensions
• private health insurance

Responsibilities

• Monitor and manage IAM systems to ensure policy compliance and secure access
• Act as technical escalation point for identity-related incidents and complex access issues
• Conduct regular reviews of user access rights and mitigate excessive or inappropriate permissions
• Support implementation of multi-factor authentication and other identity controls
• Collaborate with IT and business teams for secure onboarding, role changes, and offboarding
• Contribute to continuous improvement of identity governance and risk reduction
• Deliver identity risk assessments and recommend practical remediation measures
• Assist with privileged access management implementations

Key requirements

• Proven experience in identity and access management within a complex IT environment
• Strong understanding of authentication protocols, directory services, and access control models
• Ability to investigate and resolve identity-related issues under pressure
• Knowledge of security frameworks and compliance requirements relevant to IAM
• Excellent communication skills to work with technical and non-technical stakeholders

• communication
• collaboration
• problem-solving
• IAM platforms (Azure AD, SailPoint or similar)
• Privileged access management
• Cloud security principles in identity management

…