Cyber Security Manager - Threat Management

Introduction

Together, we’re working to welcome millions more passengers, while ensuring aviation can continue to be a force for good by leading global efforts in sustainability. At Heathrow, you can be part of this – providing solutions that make every journey better for millions each year. That means ensuring we meet the changing needs of the passengers, colleagues and partners who use our airport to work, travel, trade, shop, eat, explore and connect. Our Solutions team covers project management, process improvement, business change, technology, cyber defence, masterplanning, infrastructure and procurement. It brings together people with the skills to deliver prestigious and often large-scale projects, from transforming terminals to making big reductions in our carbon emissions.

Every day will test your skills and give you the opportunity to make your mark. You might be working with the technology and data that power our city within a city, driving vital commercial agreements with everyone from retailers to airlines, or improving the unique infrastructure that includes everything from 200 buildings to 250 HV substations. It’s a collaborative environment, where you can rely on the support of the experts around you as you take on projects you’ll both take pride in and feel passionate about.

Job Description

At Heathrow, the safety and security of our passengers and operations is our top priority. We’re looking for a Cyber Security Manager – Threat Management to help lead our threat defence capabilities, protect our digital and operational environments, and contribute to the UK’s critical national infrastructure.

This is a unique opportunity to play a key leadership role in our Cyber Security function, supporting the development and delivery of our cyber strategy while managing a team of high-performing Cyber Security Analysts.

Your role will involve

• Lead and develop a team of Cyber Security Analysts to detect, defend, and respond to cyber threats across IT and OT environments.
• Own and improve cyber security controls, tools, and monitoring capabilities aligned with frameworks such as ISO 27001, NIST, and Cyber Assessment Framework (CAF).
• Report on cyber threats, risks, vulnerabilities, and controls to both internal stakeholders and external auditors, regulators, and assurance bodies (e.g. CAA ASSURE, PCI-DSS, GDPR).
• Support the creation and maintenance of security roadmaps, policies, and frameworks that underpin Heathrow’s cyber security strategy and compliance obligations.
• Collaborate with teams across Technology, Data Protection, Corporate Risk, Security Intelligence, and Operations to drive cyber maturity.
• Lead cyber transformation initiatives and ensure compliance with regulatory, legislative, and contractual requirements.
  
  
  

These Skills Are Essential

• Proven experience in Cyber Security management within complex, regulated environments.
• Strong knowledge of threat management tools and practices, with hands-on experience applying frameworks such as ISO 27001, NIST SP-800.
• Expertise in risk management, vulnerability management, and security governance.
• Familiarity with compliance regimes such as PCI-DSS, GDPR, and sector-specific oversight like the CAA Cyber Oversight (CAP 1753) or NIS Directive.
• Skilled in translating technical threats and controls into business-relevant insights for senior stakeholders.
• Certifications such as CISM, CISSP, CRISC, GSEC, or equivalent are highly desirable.
• Desirable: Experience in Critical National Infrastructure, Operational Technology (OT) Security, and Microsoft security tools (e.g., Sentinel, Defender).