Job Description

Technical Assurance Manager - (Cyber Security)Luton/HybridCOMPANYWhen it comes to innovation and achievement there are few organisations with a better track record. Join us and youll be able to play a big part in the success of our highly successful, fast-paced business that opens up Europe so people can exercise their get-up-and-go. With over 250 aircraft flying over 700 routes to more than 30 countries, were the UKs largest airline, the fourth largest in Europe and the tenth largest in the world. Flying over 70 million passengers a year, we employ over 10,000 people. Its big-scale stuff and were still growing.THE DIGITAL SAFETY ASSURANCE TEAMThe role of Technical Assurance Manager is part of the Digital Safety Assurance team led by the Head of Digital Safety Assurance. The Digital Safety Assurance Team is made up of Risk, Compliance and Technical Specialist that are tasked with managing the cyber risk across easyJet. Digital Safety sits organisationally as part of our Group General Council Office.The Technical Assurance Manger leads our Technical Assurance team. easyJet is overseen by 3 Aviation Regulators, each with their own cyber security control expectations, along with legal compliance requirements and a changing cyber threat landscape. The Technical Assurance team is responsible for overseeing easyJets strong cyber security posture. We help functions adopt and improve control adoption as required and set the guardrails to be met.JOB PURPOSEReporting into the Head of Digital Safety Assurance, the role Technical Assurance Manager is key within the Digital Safety Assurance department. This role acts as the 2nd line of defence tasked with providing oversight of Cyber Security Controls in line with Digital Safety policy, security standards and our legal and regulatory compliance requirements. Along with capturing exposures and exceptions as part of risk identification.JOB ACCOUNTABILITIESxc2xb7 Overseeing, educating and assessing the implementation of Digital Safety policies, associated security standards and security NFRs ensuring they are effectively embedded within the organisation.xc2xb7 Overseeing processes to safeguard company data throughout all processes and systems, working with Digital Safety, Data Teams, IT operations and our IT teams to minimise data breaches or data leaks.xc2xb7 Working with the Cyber Architecture to validate the threat models produced as part of the project design process.xc2xb7 Conduct security assessments and work with Digital Safety Risk function to raise identified cyber risk into the risk management process.xc2xb7 Identity the controls failures that contribute to changing security threats, compliance requirements and changes to business access requirements.xc2xb7 Recommending information security related technical and organisational measures to meet compliance with internal and external regulations, including GDPR.xc2xb7 Working with the functional Managers and Department Head of to develop and implement strategies to embed control effectiveness where deficiencies are found.xc2xb7 Collaborating with other teams and departments to foster a culture of security and awareness within the organisation.xc2xb7 Delivering training sessions and workshops to staff on cyber security and protection of data-in-use related topics to ensure understanding and compliance.xc2xb7 Preparing reports on Technical Assurance activities performed and presenting them to management and stakeholders, highlighting any areas for concern or improvement.xc2xb7 Support during security incidents to work to minimise cyber-attack or understand data loss.QualificationsKEY SKILLSxc2xb7 Technical cyber security knowledge and practical experience of cloud computing technologies e.g. AWS, GCP and Azure.xc2xb7 Detailed understanding of data protection, cyber security, privacy and confidentiality.xc2xb7 Detailed understanding of the importance of access control in the protection of data.xc2xb7 Detailed understanding of the protection controls applied to data throughout its lifecycle (including structured and unstructured data sets), data-at-rest, data-in-transit and data-in-use.xc2xb7 Detailed understanding of privacy engineering controls e.g. encryption, masking and pseudonymisation.xc2xb7 Detailed understanding of the information lifecycle and the self assurance framework for Records Management.xc2xb7 Experience of implementing data security standards such as ISO27001, PCI DSS, NIST CSF, CAA CAF etc.xc2xb7 Ability to effectively manage cyber security risks and can clearly communicate with key stakeholders to minimise the risk to easyJet.DESIRABLE SKILLSxc2xb7 Experience leading a Cyber Security Assurance function or similarxc2xb7 Bachelor's Degree (or equivalent experience) in Cybersecurity, Computer Science, Information Systems, or related fieldxc2xb7 Professional Information Security certification such as CCSP, CISM, CISSP, CEH, GIAC, or CASP+COMPETENCIESxc2xb7 Ownership and Delivery. Has a clear focus to deliver results, working to targets, reviewing progress and adapting their plans accordingly, motivating themselves/the team to achieve.xc2xb7 Customer and Shareholder Value. Understands who their customers are and seeks to exceed their needs, focussing on the importance of safety for both customers and employees.xc2xb7 Business Performance. Understands business and external environment, is cost conscious and understands the longer-term perspective and implications of decisions.xc2xb7 Building Relationships. Expresses ideas confidently and clearly, builds positive and constructive relationships with others, gets to know colleagues within their own team and supports them to ensure team goals are achieved.BENEFITSxc2xb7 Competitive base salaryxc2xb7 Up to 20% bonusxc2xb7 25 days holidayxc2xb7 BAYE, SAYE & Performance share schemesxc2xb7 7% pensionxc2xb7 Life Assurancexc2xb7 Flexible benefits packagexc2xb7 Excellent staff travel benefitsAbout easyJetAt easyJet our aim is to make low-cost travel easy connecting people to what they value using Europes best airline network, great value fares, and friendly service.It takes a real team effort to carry over 90 million passengers a year across 35 countries. Whether youre working as part of our front-line operations or in our corporate functions, youll find people that are positive, inclusive, ready to take on a challenge, and that have your back. We call that our xe2x80x98Orange Spirit, and we hope youll share that too.ApplyComplete your application on our careers site.We encourage individuality, empower our people to seize the initiative, and never stop learning. We see people first and foremost for their performance and potential and we are committed to building a diverse and inclusive organisation that supports the needs of all. As such we will make reasonable adjustments at interview through to employment for our candidates.

EasyJet