Security Operations Analyst

Overview

In this role you protect aviation-critical systems by leading EASA Part-IS compliance and maintaining the site’s ISMS within Moog’s global cybersecurity function. You will work with local leadership to manage cyber risk, drive security improvements, and coordinate with regulators and auditors. The role blends governance, risk, and security operations to safeguard aviation safety. You’ll be part of a global team delivering consistent security practices in a highly regulated environment.

Pay / Benefits

• flexible benefits package
• 33 days annual leave
• private medical insurance
• mental health support and financial advice
• life assurance and company pension contribution
• employee share options

Responsibilities

• Lead EASA Part-IS compliance activities for the Tewkesbury site
• Operate and maintain the site’s Information Security Management System (ISMS)
• Monitor security events, investigate incidents, and coordinate response activities
• Conduct risk assessments, vulnerability reviews, and security audits
• Act as the primary point of contact for EASA regulators and auditors
• Coordinate cybersecurity risks that could impact aviation safety
• Support the deployment and management of security technologies and controls
• Partner with global cybersecurity teams to drive consistency and continuous improvement

Key requirements

• Experience in cybersecurity, information security, governance, compliance, or risk management
• Strong understanding of security operations, incident response, vulnerability management, and security best practices
• Experience working within aerospace, manufacturing, defence, or other highly regulated environments
• Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar
• Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and non-technical teams
• Professional certifications such as Security+, CISSP, CISM, CEH, or equivalent would be advantageous

• excellent communication
• stakeholder management
• cross-functional collaboration
• EDR/XDR
• SIEM
• Privileged Access Management

…