Cyber Security Expert Advisor

We are the UK's aviation and aerospace regulator and recognised as a world leader in its field. Our activities are diverse, enabling the aviation industry to meet the highest safety standards, and we pride ourselves on our ability to adapt to the constantly evolving aviation environment.

The Cyber Security team within the Aviation Security Directorate provides effective and proportionate regulation of cyber security risk to the UK aviation industry. The team's primary objective is to meet UK, European, and international aviation regulatory obligations for cyber security. The Cyber Security Expert Advisor role sits within the Cyber Security Policy team that leads the development of the strategic direction of Cyber Security Policy in UK Aerospace.

Responsibilities

• Offering advice to the Oversight and Certification teams on the interpretation of cyber security policy.
• Engaging with Department for Transport and other Government Departments.
• Collaborating with industry and other external stakeholders to ensure policy developments are fully communicated.
• Influencing global policy through the teams ICAO Panel and Working Group activity.
• Coordinating the delivery of industry engagement activities such as meetings, working groups and conferences.
• Delivery of internal panels and boards such as the Cyber SRP and CG.
• Actively engaging with other CAA departments on cross cutting issues.
• Development and delivery of CAAi Cyber security training.

The Cyber Security Expert Advisor will also provide operational support, where required, to the wider Cyber Team to ensure that objectives are achieved in a timely, efficient, and accurate manner.

Support the development and maintenance of cyber security policy for UK aviation by contributing to policy interpretation, impact assessments, risk analysis, and options appraisals under the guidance of senior colleagues. Assist team members in the preparation of regulatory proposals, including drafting background material and supporting instructions to legal teams on the development or amendment of cyber security regulations. Provide researched and evidence-based input to support advice given to Oversight and Certification teams on the interpretation and application of cyber security policy, escalating complex issues where appropriate. Support engagement with the Department for Transport, other Government Departments, and external stakeholders by preparing briefing materials, notes, and presentations, and helping to ensure consistent communication of cyber security policy. Assist with activities that contribute to international and industry engagement, including support to ICAO related workstreams and maintenance of records and inputs that support global policy development. Deliver the Cyber Security Industry Working Group (CSIWG), including meeting coordination, agenda preparation, minute taking, and tracking of actions and deliverables. Lead the preparation and delivery of internal panels and boards, including coordinating papers, managing documentation, and supporting follow up actions. Deliver operational expertise across the wider Cyber Security team, helping to ensure that team deliverables are completed accurately, efficiently, and to agreed timescales. Actively build knowledge of aviation cyber security regulation, UK and international frameworks, and internal governance processes, identifying opportunities to improve ways of working and personal capability. Act as a point of contact for industry, stakeholders, and colleagues through management of the Cyber mailbox. Provide expertise in the development and delivery of CAAi Cyber training courses domestically and internationally including Cyber Security Oversight, Cyber Security Awareness and Part-IS Familiarisation.

About You

• Understanding and interest in cyber security in aviation.
• Expert knowledge of security and/or safety regulations within aviation.
• Strong verbal and written communication skills with a proven ability to communicate effectively at all levels and to produce concise, unambiguous discussion papers for presentation at various bodies within the CAA and industry both domestically and internationally.
• A knowledge of risk-based principles.
• A team player with an adaptable work ethos, analytical and lateral thinker with an eye for detail that can work under pressure and to tight deadlines and has a professional confident approach to day-to-day work.
• Strong interpersonal skills, able to demonstrate the application of personal values and behaviours that are a role model for the values of the CAA.
• Self-motivated and willing to work flexibly using their initiative, reaching sound judgment but able to identify when to seek guidance.
• Knowledge and/or experience of the aerospace industry, including airports, ANSP’s, air carriers.
• Expertise in drafting accurate and influential written documents in a wide variety of styles, tailored to the appropriate audience.
• Ability to work for periods unsupervised, as the situation demands.
• Ability to explain technical issues clearly, including to internal and external stakeholders.
• The ability to interpret different systems such as SharePoint, Quality Management (QPulse), EPT and Cygnum to provide data on request.
• Proficient in Microsoft applications.
• Able to attain and maintain SC security vetting.
• Knowledge of Project Management principles.
• Knowledge and experience of cyber standards, policy, and guidance (e.g., ISO27001, NIST, Part-IS, NIS).
• Experience in working with data and data analytics software (PowerBI).
• Cyber technical expertise gained through relevant experience or formal training.
• Able to manage different workstreams to differing timescales.
• Confident in interacting and challenging CAA colleagues across the CAA.
• Knowledge and understanding of the implementation of management systems with experience in implementing policies and procedures.
• A good understanding of data protection principles.
• Experience working in a regulatory compliance or project management-based environment.

Additional Information

For many appointments within the CAA, these roles require access to operationally sensitive infrastructure and/or Nationally Protected information. For these roles the post holders must undergo National Security Vetting and achieve the appropriate level of clearance. SC - To be vetted we will usually expect a reasonable period of residency in the UK so that meaningful checks can be undertaken. For this role this will need to be 5 years. If you do not meet these requirements, we may not be able to accept your application.

Inclusive Recruitment

We are committed to building a diverse and inclusive workforce and welcome applications from all backgrounds. As a Disability Confident employer, candidates who meet the minimum requirements will be guaranteed an interview. If you require any adjustments during the recruitment process, please let us know.