Cyber Security Manager

As a Cyber Security Manager - Supply Chain, you’ll play a vital role in protecting Heathrow’s digital ecosystem by ensuring that our suppliers and partners meet the highest standards of cyber security. You’ll work within the Cyber Security team, collaborating closely with Procurement, Legal, and Technology colleagues to manage third-party risks and strengthen our overall cyber resilience.

This role is central to Heathrow’s mission to deliver a world-class, safe, and sustainable airport. You’ll help shape how we assess, monitor, and improve supplier security practices, ensuring that every organisation we work with contributes to a secure and trusted supply chain. Success in this role means reducing risk exposure, improving supplier compliance, and embedding a culture of cyber awareness across Heathrow’s extended enterprise.

• Developing and implementing Heathrow’s supplier cyber risk management framework, ensuring alignment with NCSC and ISO 27001 standards.
• Conducting supplier security assessments and audits, identifying vulnerabilities, and driving remediation plans with internal and external stakeholders.
• Collaborating with Procurement and Legal teams to embed cyber security requirements into supplier contracts and onboarding processes.
• Monitoring supplier performance and compliance through continuous assurance activities and risk reporting.
• Supporting incident response activities involving suppliers, ensuring lessons learned are captured and improvements implemented.

• Proven experience in cyber security risk management, ideally within a complex supply chain or critical national infrastructure environment.
• Strong understanding of third-party risk management frameworks, ISO 27001, NIST, and NCSC guidance.
• Experience conducting supplier security assessments and managing remediation activities.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels.
• Analytical mindset with strong problem-solving and decision-making abilities.
• Relevant professional certification (e.g., CISSP, CISM, CRISC, or equivalent experience).

Ideally you’ll also have

• Experience working in aviation, transport, or other regulated industries.
• Knowledge of Heathrow’s operational technology and digital systems landscape.
• Familiarity with supplier assurance tools and continuous monitoring platforms.