This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
This role sits within British Airways’ Digital directorate, as part of the Cyber Compliance function. The team plays a critical role in identifying, assessing and managing BA's Cyber Safety and Security Cyber compliance programmes across the airline, ensuring our systems, data and operations remain secure in an increasingly complex threat landscape. In a safety-critical, highly regulated global airline, effective cyber compliance is essential to maintaining operational resilience, protecting customer trust and safeguarding the British Airways brand.
Job Responsibility:
Gather and maintain current evidence set to support compliance requirements (PCI DSS, SWIFT) and NIST maturity scoring for British Airways
Interpret security controls accurately with regard to system security posture, including configuration of systems with regard to technical security
Developing a thorough understanding of each of the relevant regulations that the business needs to adhere to
Monitor, track and report results of assessments and effective implementation of mitigation plans
Work closely with cross-functional teams (Internal & External Audit, IAG Tech, Cyber Assurance Leads) to support other Cyber compliance Activities
Develop, maintain and present reports, KPIs, and Dashboards
Develop and enhance our Identity Governance practices
Facilitate audit activity and evidence collection for critical identity services
Proactive involvement in creating awareness of Compliance programs across British Airways
Help build a more compliance and risk-aware culture
Management of ISMS (Information Security Management Systems)
Requirements:
Strong team working capabilities and can-do approach
Strong stakeholder management skills
Ability to rationalise and present compliance data to stakeholders to enable decision making
Ability to work to deadlines, prioritise tasks
Excellent communication and interpersonal skills
Proactive investigator, working collaboratively and constructively with multiple stakeholders to gather evidence
Experience of leading PCI maintenance programmes is highly desired
Experience of identity governance and assurance using AWS IAM, Entra and Sailpoint is highly desired
Experience working in aviation, safety-critical or critical national infrastructure environments is highly desirable
Staff travel including unlimited basic and premium standby tickets on British Airways flights
Up to 30 discounted ‘Hotline’ airfares per year for yourself, friends, and family
Market-leading defined contribution (DC) pension
Flexible benefits including critical illness cover, childcare vouchers, cycle to work, additional life insurance cover, private medical insurance, dental plan, and healthcare cash plan