Senior Cyber Security Analyst (Cyber Business Partnering)

NATS is the UK’s leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products and solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe.

Job Purpose

The Cyber Business Partnering team works across the organisation to ensure cyber security is understood, embedded and aligned with business priorities. As the team continues to grow, we are seeking a Senior Cyber Security Analysts to join us.

Role

The role offers the opportunity to work across a broad range of cyber security disciplines while helping the business understand and manage cyber risk. Depending on your experience and interests, you may contribute to areas including:

• First Line Assurance
• Technical Assurance
• Supply Chain Assurance
• Culture and Engagement

Whether you're a cyber security generalist, or looking to develop expertise in a particular area, you'll have the opportunity to make a real impact while building your skills across a varied and dynamic portfolio.

Our Senior Cyber Security Analysts are responsible for assessing, delivering, maintaining and maturing the security practices within the organisation, ensuring that security plans, policies and practices reflect corporate standards and good practices, support the business functions, with focus on continuous improvement.

This role will support and develop Cyber Security Analysts, initiating and managing their own work items and acting as a subject matter expert in their focus security domains.

Key Responsibilities

• Identify threats and risks, to shape and inform the development and implementation of mitigating strategies that strengthen NATS' security levels.
• Develop and maintain security standards, policies, and procedures to ensure alignment with recognised frameworks e.g. ISO 27001 and NIST.
• Develop and maintain the risk assessment framework and risk register, to support risk assessment activities across the organisation.
• Collaborate with business units to identify and design changes and improvements, to address their security needs and promote compliance and capability development.
• Conduct assurance and measurement processes for organisational security capabilities, to produce insightful reports and guide remedial actions across relevant business areas.
• Plan and execute security improvement initiatives across business areas, to ensure consistent delivery and alignment with organisational security objectives.
• Provide technical guidance, support development to other members of the team, to ensure consistency in security practices.
• Monitor developments in security frameworks, regulation, and legislation, to advise on their implications and influence improvements to NATS' security processes.

About You

You’ll Ideally Have

• Degree in Cybersecurity, Information Security / related field (or equivalent experience).
• CISMP, ISO 27001 Lead Implementer or equivalent professional certification or experience.
• Demonstrated experience in delivering initiatives which develop capability and promote compliance with security obligations.
• Experience in evaluating complex security challenges across technical, process, and business domains, applying sound judgement to deliver pragmatic and effective solutions.
• Experience identifying, developing and implementing, risk mitigation plans, policies, processes and technical controls.
• Understanding and experience of applying industry standards e.g. ISO27001 and NIST.
• Demonstrates a solid understanding of security controls required to identify, assess and address information security or cyber vulnerabilities across the organisation.
• Works collaboratively across teams and disciplines, supporting colleagues and contributing to a positive team environment. Provides guidance and mentoring where appropriate.
• Communicates confidently and effectively with stakeholders at all levels, translating complex information into clear, actionable messages.
• Proactively takes ownership of personal development, setting goals and seeks opportunities to learn. Encourages and supports team growth through knowledge sharing and mentoring.

Additional Vacancy Information:

We are proud to offer a fantastic total reward package to help you thrive both personally and professionally - for more information on what NATS can offer you please visit Why NATS?

We have adopted agile working to provide greater flexibility and increased choice over working arrangements, with the opportunity for this role to work in our modern office facilities as well as remotely.

If you share our passion to advance aviation and keep the skies safe – we would like to hear from you whatever your age, sex, race, faith, sexual orientation, gender identity, gender expression, visible or invisible disability. Individuals that bring different perspectives, skills, life experiences and backgrounds help us be at the forefront of our industry.

#J-18808-Ljbffr