Technical Assurance Manager - (Cyber Security)

Luton/Hybrid

COMPANY

When it comes to innovation and achievement there are few organisations with a better track record. Join us and you’ll be able to play a big part in the success of our highly successful, fast-paced business that opens up Europe so people can exercise their get-up-and-go. With over 250 aircraft flying over 700 routes to more than 30 countries, we’re the UK’s largest airline, the fourth largest in Europe and the tenth largest in the world. Flying over 70 million passengers a year, we employ over 10,000 people. Its big-scale stuff and we’re still growing.

THE DIGITAL SAFETY ASSURANCE TEAM

The role of Technical Assurance Manager is part of the Digital Safety Assurance team led by the Head of Digital Safety Assurance. The Digital Safety Assurance Team is made up of Risk, Compliance and Technical Specialist that are tasked with managing the cyber risk across easyJet. Digital Safety sits organisationally as part of our Group General Council Office.

The Technical Assurance Manger leads our Technical Assurance team. easyJet is overseen by 3 Aviation Regulators, each with their own cyber security control expectations, along with legal compliance requirements and a changing cyber threat landscape. The Technical Assurance team is responsible for overseeing easyJet’s strong cyber security posture. We help functions adopt and improve control adoption as required and set the guardrails to be met.

JOB PURPOSE

Reporting into the Head of Digital Safety Assurance, the role Technical Assurance Manager is key within the Digital Safety Assurance department. This role acts as the 2nd line of defence tasked with providing oversight of Cyber Security Controls in line with Digital Safety policy, security standards and our legal and regulatory compliance requirements. Along with capturing exposures and exceptions as part of risk identification.

JOB ACCOUNTABILITIES

·       Overseeing, educating and assessing the implementation of Digital Safety policies, associated security standards and security NFRs ensuring they are effectively embedded within the organisation.

·       Overseeing processes to safeguard company data throughout all processes and systems, working with Digital Safety, Data Teams, IT operations and our IT teams to minimise data breaches or data leaks.

·       Working with the Cyber Architecture to validate the threat models produced as part of the project design process.

·       Conduct security assessments and work with Digital Safety Risk function to raise identified cyber risk into the risk management process. 

·       Identity the controls failures that contribute to changing security threats, compliance requirements and changes to business access requirements.

·       Recommending information security related technical and organisational measures to meet compliance with internal and external regulations, including GDPR.

·       Working with the functional Managers and Department Head of to develop and implement strategies to embed control effectiveness where deficiencies are found.

·       Collaborating with other teams and departments to foster a culture of security and awareness within the organisation.

·       Delivering training sessions and workshops to staff on cyber security and protection of data-in-use related topics to ensure understanding and compliance.

·       Preparing reports on Technical Assurance activities performed and presenting them to management and stakeholders, highlighting any areas for concern or improvement.

·       Support during security incidents to work to minimise cyber-attack or understand data loss.