Cyber Risk Assurance Analyst

The role is part of a team of cyber security professionals and works closely with the wider business to ensure that Digital Safety principles are as engrained as Aircraft Safety. It requires alignment with Operational, Commercial, Regulatory and Audit functions. The role supports the Digital Safety vision in collaboration with the Senior Digital Safety Risk Manager, the Head of Digital Safety Assurance and the Technical Security and Business Partner functions. The Cyber Risk Assurance Analyst uses data and analytical skills to identify, measure, and track cyber security risks within easyJet, and collaborates with various business areas to gather information for informative risk reports that aid decision making in relevant forums and support the Digital Safety Assurance team’s objectives, highlighting key areas related to regulatory compliance and control maturity.

Responsibilities

• Effectively leverage the Digital Safety risk framework to identify, analyse and manage cyber risk within easyJet, reflecting in-depth knowledge and experience.
• Actively engage with numerous functions, from technical IT to business facing functions, to gather a comprehensive range of risk-related information to demonstrate broad organisational understanding.
• Apply the Digital Safety assurance processes to accurately identify and register risks, demonstrating strategic initiative and proactively to perceive and register risks.
• Collaborate with the IT Quality and Risk function to identify significant areas of IT risk in the context of Digital Safety risks, demonstrating strong cross-functional teamwork.
• Report to senior management via appropriate forums on risk and assurance findings and risk treatment plans;
• Present and articulate findings at risk forums to facilitate the management of identified risks, showcasing nuanced understanding and strong communication skills;
• Maintain and update knowledge of the current threat landscape and evaluate its impact on the likelihood of risk events occurring, reflecting a commitment to knowledge development.
• Provide education, guidance and mentorship to colleagues outside of Risk and Assurance on the use of the risk methodology, fostering a companywide understanding of risk management and reporting.
• Tracking, management and reporting of risk, control and deviation remediation activities.
• Facilitate in the preparation of material for internal or external auditors.
• Preside over meetings, ensuring key decisions and discussions are minuted and action logs are maintained for future reference.
• Provide strategic support to the Digital Safety Risk and Assurance team to identify and capture gaps and information concerning the data governance framework.
• Responsible for updating the risk register of information assets with risks associated with each asset.
• Maintain the risk register of exceptions, assess and record the risk associated with any exceptions.
• Collating information from the control and information asset registers to provide internal compliance reports.
• Has appropriate communication skills for effective dialogue with customers, suppliers and partners.
• Is able to work in a team. Is able to plan, schedule and monitor own work within short time horizons. Demonstrates a rational and organised approach to work.
• Is fully aware of and complies with essential organisational security practices expected of the individual.
• Analytical mindset.
• Motivation to develop and maintain subject matter expertise.
• Ability to work to deadlines, prioritize and multi-task.
• Ability to manage own workload and meeting schedule.
• Basic report writing.
• Ability to absorb and learn technical information and communicate this in a way that is easy to understand.

Desirable Skills/Experience

• Ideally previous work in a cyber / information security compliance role that has required a general broad understanding of controls. However, business experience gained in a similar role combined with relevant information security / cyber security education would also be appropriate.
• Experience in a similar information security role or other business roles where risk management formed part of the role\’s responsibilities.

Benefits

• Competitive base salary
• Up to 20% bonus
• 25 days holiday
• BAYE, SAYE & Performance share schemes
• 7% pension
• Life Insurance
• Work Away Scheme
• Flexible benefits package
• Excellent staff travel benefits

About EasyJet: At easyJet our aim is to make low-cost travel easy – connecting people to what they value using Europe\’s best airline network, great value fares, and friendly service.