Cyber Security Manager

Overview

In this role you protect Heathrow’s digital ecosystem by managing supplier cyber risk and embedding secure practices across the extended enterprise. You will work with Procurement, Legal and Technology to strengthen third-party resilience and reduce risk exposure. The position sits in the Cyber Security team and supports Heathrow’s mission to deliver a safe, sustainable airport. You’ll shape supplier security assessments, monitoring, and remediation in a scale-driven environment.

Pay / Benefits

• competitive salaries
• performance-based annual bonuses
• Share in Success bonus plans
• generous annual leave
• market-leading pensions
• private health insurance

Responsibilities

• Develop and implement Heathrow’s supplier cyber risk management framework aligned with NCSC and ISO 27001
• Conduct supplier security assessments and audits, identify vulnerabilities, and drive remediation with stakeholders
• Collaborate with Procurement and Legal to embed cyber security requirements into contracts and onboarding
• Monitor supplier performance and compliance through continuous assurance and risk reporting
• Support incident response involving suppliers and ensure lessons learned are implemented

Key requirements

• Proven experience in cyber security risk management, ideally in complex supply chains or critical infrastructure
• Strong understanding of third-party risk management frameworks, ISO 27001, NIST, NCSC guidance
• Experience conducting supplier security assessments and remediation management
• Excellent stakeholder management and communication skills with ability to influence at all levels
• Analytical mindset with strong problem-solving and decision-making abilities
• Relevant professional certification (e.g., CISSP, CISM, CRISC)

• Stakeholder management
• Communication
• Analytical thinking
• Third-party risk management
• Supplier security assessments
• Remediation planning

…