Cyber Security Manager

As a Cyber Security Manager – Supply Chain, you’ll play a vital role in protecting Heathrow’s digital ecosystem by ensuring that our suppliers and partners meet the highest standards of cyber security. You’ll work within the Cyber Security team, collaborating closely with Procurement, Legal, and Technology colleagues to manage third-party risks and strengthen our overall cyber resilience.

This role is central to Heathrow’s mission to deliver a world-class, safe, and sustainable airport. You’ll help shape how we assess, monitor, and improve supplier security practices, ensuring that every organisation we work with contributes to a secure and trusted supply chain. Success in this role means reducing risk exposure, improving supplier compliance, and embedding a culture of cyber awareness across Heathrow’s extended enterprise.

- Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment.
- Strong understanding of third-party risk management frameworks, ISO 27001, NIST, and NCSC guidance.
- Experience conducting supplier security assessments and managing remediation activities.
- Excellent stakeholder management and communication skills, with the ability to influence at all levels.
- Analytical mindset with strong problem-solving and decision-making abilities.
- Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience).

Ideally you’ll also have

- Experience working in aviation, transport, or other regulated industries.
- Knowledge of Heathrow’s operational technology and digital systems landscape.
- Familiarity with supplier assurance tools and continuous monitoring platforms.