Overview
In this Cyber Delivery Assurance Lead role, you act as the cyber representative within product delivery teams to actively manage cyber risk and ensure security controls are designed, implemented and operating effectively. You will work hands-on to embed security by design across programmes and products, not just review documents. You’ll collaborate with BA Tech Delivery, the BA Cyber Team and the IAG Cyber Security Office to align with risk appetite and regulatory obligations. This is a practical, delivery‑oriented security role with a meaningful impact on safe, compliant product delivery. You’ll help shape secure delivery at scale within a historic, customer‑facing airline.
Pay / Benefits
- staff travel benefits including unlimited basic and premium standby tickets
- up to 30 discounted 'Hotline' airfares per year for you and friends/family
Responsibilities
- Provide delivery assurance to ensure programmes and products operate within BA’s cyber risk appetite
- Work hands-on with delivery teams to embed security by design and ensure cyber controls are implemented and operating effectively
- Interpret and apply cyber security policies and guidelines across releases and maintenance
- Conduct threat and risk assessments across varied technology stacks and define mitigating controls
- Advise on practical application of security controls, legislation and regulatory requirements
- Act as cyber contact for programmes and products, supporting end-to-end secure delivery
- Engage with IAG Cyber Security Office for consistency and best practice
- Identify, manage and report cyber risks and exceptions throughout the product lifecycle
- Support cyber governance forums and provide updates on security deliverables
- Promote cyber risk awareness and support security initiatives across the organisation
Key requirements
- Strong hands-on cyber security experience with ability to assess real systems and influence secure design
- Broad technical understanding of cyber security controls across multiple domains
- Experience working with engineers, architects and delivery teams to resolve issues pragmatically
- Ability to balance standards compliance with practical delivery constraints
- Excellent stakeholder management with experience influencing at senior levels
- Calm, resilient approach in fast-paced environments
- Clear, positive communicator on cyber risk and controls
- Proven experience providing cyber security assurance or secure delivery support in complex environments
- Experience performing threat and risk assessments and defining mitigating controls
- Experience in regulated environments with strong cyber/compliance requirements
- Knowledge of frameworks/regulatory requirements such as NIST, PCI DSS, GDPR and NIS
- Experience in agile delivery environments is advantageous
- Relevant cyber security qualifications (e.g. CISSP, ISO27001 Lead Implementer, SANS GIAC or equivalent) desirable
- stakeholder management
- influencing at senior levels
- calm and resilient under pressure
- security by design
- threat and risk assessment
- cyber security controls across multiple technology domains
Cyber Delivery Assurance Lead in Heathrow employer: British Airways
British Airways is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the heart of the aviation industry. As a Lead Product Data Scientist, you will have access to cutting-edge technology and significant opportunities for professional growth, all while contributing to impactful projects that enhance operational efficiency. With a commitment to employee development and a focus on delivering measurable business value, British Airways provides a rewarding environment for those looking to make a difference in their careers.
