Cyber Delivery Assurance Lead Heathrow, England in London

A career without limits. As the nation’s flag carrier, we take great pride in connecting Britain with the world and the world with Britain. It’s something we’ve been doing for over 100 years, ever since we launched the world’s first international scheduled air service between London and Paris. This originality has been in our blood since day one. It’s the spirit we share with the people that fly with us, our partners, and our colleagues. So, whether you are a reassuring voice on the end of a phone, a smile at the door, under a wing keeping the turbines spinning or landing us gently in far‑flung places, a job at British Airways is yours to make. We know great things can happen when you’re inspired to think big and bring your ambition to work every day, which is why, at British Airways, the sky is never the limit.

The role: Cyber Delivery Assurance Lead. As Cyber Delivery Assurance Lead, you’ll act as the British Airways cyber representative embedded within product delivery teams, ensuring cyber risk is actively managed and security controls are designed, implemented and operating effectively across programmes and products. This is a hands‑on cyber assurance role. You’ll be expected to bring strong practical experience of applying cyber security controls, assessing real systems and architectures, and working directly with delivery teams to embed security by design — not simply reviewing documentation or providing high‑level guidance. Reporting to the Head of Cyber & IT Risk, you’ll work closely with BA Tech Delivery teams, the BA Cyber Team and the IAG Cyber Security Office to ensure solutions meet BA’s risk appetite and regulatory obligations.

What you’ll do:

• Provide delivery assurance to ensure programmes and products operate within BA’s cyber risk appetite.
• Work hands‑on with delivery teams to embed security by design and ensure appropriate cyber controls are implemented and operating effectively.
• Interpret and apply cyber security policies, standards and guidelines across product releases and ongoing maintenance.
• Conduct threat and risk assessments across varied technology stacks and define proportionate mitigating controls.
• Provide authoritative advice on the practical application of security controls, legislation and regulatory requirements.
• Act as the cyber point of contact for programmes and products, supporting secure delivery end‑to‑end.
• Engage proactively with the IAG Cyber Security Office assurance and architecture functions to ensure consistency and best practice.
• Identify, manage and report cyber risks and exceptions throughout the product lifecycle.
• Support cyber governance forums and provide clear, accurate updates on security deliverables.
• Promote cyber risk awareness and support security awareness initiatives across the organisation.

What you’ll bring to British Airways:

• Strong hands‑on cyber security experience, with the ability to assess real systems and influence secure design and delivery decisions.
• Broad technical understanding of cyber security controls across multiple technology domains.
• Confidence working directly with engineers, architects and delivery teams to resolve security issues pragmatically.
• Ability to balance standards compliance with practical delivery constraints.
• Excellent stakeholder management skills, with experience influencing at senior levels.
• Calm, resilient approach in fast‑paced and changing environments.
• Clear, positive communicator who can explain cyber risk and controls effectively.

Your experience:

• Proven experience providing cyber security assurance or secure delivery support in complex environments.
• Demonstrable experience performing threat and risk assessments and defining mitigating controls.
• Experience working in regulated environments with strong cyber and compliance requirements.
• Knowledge of cyber security frameworks and regulatory requirements such as NIST, PCI DSS, GDPR and NIS.
• Experience in agile delivery environments is advantageous.
• Relevant cyber security qualifications (e.g. CISSP, ISO27001 Lead Implementer, SANS GIAC or equivalent) desirable.

What we offer: We believe that all the people who work with us should feel valued for the part they play. It’s one of the reasons our rewards go far beyond a competitive salary. From the day you join us, you’ll get access to brilliant staff travel benefits including unlimited basic and premium standby tickets on British Airways flights. You’ll also receive up to 30 discounted ‘Hotline’ airfares per year for yourself, friends, and family. At British Airways you’ll have the chance to take on new challenges and move forward in a way that feels right for you. We encourage all those who work for us to consider opportunities right across our business to help you develop and progress. We never stand still, and we don’t expect our people to either.

Inclusion & Diversity: At British Airways we all have a part to play in creating an inclusive place to work. Diverse representation among our people is really important to us and we recognise that all our colleagues are uniquely different and bring their own originality, creativity and identity to work. Inclusion and diversity is a key driver of innovation and we’re committed to creating a culture where everyone feels that they can be themselves. We’re looking for people from all backgrounds and cultures to join us and be a part of our journey to become a Better BA as we continue to connect Britain with the world and the world with Britain.