Farnborough Airport Limited (FAL) is the owner and operator of Farnborough Airport (FAB), Europe’s leading business aviation airport and the birthplace of British aviation. FAB handles approximately a third of London’s business aviation traffic, making it the largest business aviation airport in the UK. FAL owns and operates both the airport and the Fixed Base Operator (FBO) facilities at FAB, making its integrated operations unique to the market. FAB has some of the most advanced and iconic airport infrastructure in the world, specifically tailored to delivering a first-class customer experience for its users. Over the years, FAB has been consistently recognised as the best FBO in Europe.
FAB operates alongside the Aviator Hampshire Hotel, a luxury hotel located on the perimeter of the airport and one of the best hotels in the UK. Both companies are jointly owned by the Farnborough Airport Company Limited (FACL), a company 100% owned by Macquarie Asset Management (MAM) through one of its long-term European infrastructure funds. MAM is one of the largest infrastructure investors in the world and has an extensive track record in airport investment and ownership. From a leadership and business perspective, FAB and the Aviator Hampshire Hotel are managed together as a Group.
Farnborough Airport Limited is an equal opportunities employer, promoting diversity and inclusion throughout the organisation.
What we are looking for
We are seeking an experienced Cyber Security and Resilience Manager to lead and continuously enhance cyber security, information security and operational resilience across our Group businesses.
Reporting to the Head of IT and Cyber Security, you will play a key role in protecting critical business services, managing cyber risk, supporting regulatory compliance, and helping the organisation maintain a strong security culture.
This is an excellent opportunity for an established cyber security professional who enjoys working with senior stakeholders, influencing business decisions, and delivering practical security improvements in a complex and highly regulated environment.
About the role
Key responsibilities include:
Cyber Security Strategy & Governance
- Develop and maintain the Group's cyber security strategy and roadmap.
- Establish and continually improve security policies, standards and governance frameworks.
- Provide trusted advice and guidance to senior stakeholders.
- Report on cyber security performance, risks and priorities.
Cyber Risk Management
- Lead the identification, assessment and management of cyber risks.
- Support business projects and initiatives with security risk assessments.
- Work with stakeholders to develop and implement risk mitigation plans.
- Maintain oversight of cyber risk activity across the organisation.
Security Operations & Incident Management
- Oversee security operations and third-party security service providers.
- Support the investigation and management of cyber security incidents.
- Drive continuous improvement of cyber monitoring and response capabilities.
- Coordinate lessons learned and remediation activities following security events.
Information Security & Compliance
- Support compliance with relevant legal, regulatory and industry requirements.
- Assist with internal and external audits.
- Maintain security documentation and compliance evidence.
- Promote good information security practices across the organisation.
Business Continuity & Operational Resilience
- Support the development and maintenance of business continuity and resilience programmes.
- Contribute to resilience planning, testing and exercising activities.
- Help ensure critical business services can continue to operate during disruptive events.
- Support recovery planning and continuous improvement initiatives.
Security Awareness & Culture
- Develop and deliver engaging security awareness initiatives.
- Promote positive security behaviours across all areas of the business.
- Deliver training, communications and briefing sessions for employees and management
Project & Supplier Assurance
- Provide security input into projects, technology initiatives and supplier engagements.
- Support the adoption of secure-by-design principles.
- Work with internal teams and third-party providers to manage security risks.
Financial & Leadership Responsibilities
- Manage cyber security budgets and investment proposals.
- Support organisational objectives and continuous improvement initiatives.
- Champion company values and contribute positively to the wider business.
General
- Consistently demonstrate and encourage others to adhere to the company values of Proud, Passionate, Ambition and Together.
- Contribute to the Company’s aspiration of becoming an Employer of Choice and Responsibility in the local area by actively participating in our volunteering opportunities where possible.
- Demonstrate engagement with and adherence to the Company’s policies, procedures, guidelines, wellbeing initiatives and reporting channels to ensure all work is carried out safely and to the highest standards, including but not limited to:
- Health & Safety, Occupational Health & Safety, Compliance and Environmental standards / legislation.
- Aerodrome license and CAA standards.
- Appropriate Workplace Behaviour, UK Modern Slavery and General Data Protection & Retention (GDPR) Policies.
- Support the team with adhoc activities/tasks as reasonably requested.
About You
Essential
- Evidence of Right to Work in the UK.
- Full 5-year employment/educational history required (with no unaccounted-for gaps).
- Able to obtain a clear Criminal Record Check (CRC) certificate and a Counter Terrorist Check (CTC) certificate to the required security clearance level for this role.
- Hold a full valid UK Driving License or equivalent.
- Minimum of five years' experience in cyber security, information security, risk management or cyber resilience roles.
- Experience managing external security service providers.
- Experience leading or supporting cyber incident management activities.
- Strong understanding of cyber risk management principles.
- Experience delivering security awareness and engagement programmes.
- Experience supporting security governance, compliance or audit activities.
- Ability to engage effectively with senior stakeholders and business leaders.
- Experience managing supplier relationships and third-party risk
Desirable
- Experience within aviation, transport, or other regulated industries.
- Experience working within a multi-site organisation.
- Experience supporting ISO 27001, Cyber Essentials Plus or similar assurance frameworks.
- Experience working within critical infrastructure or highly regulated environments.
- Experience across modern cloud-based technology environments.
- Relevant professional certifications would be advantageous, including:
- CISSP
- CISM
- CRISC
- CCSP
- ISO 27001 Lead Implementer or Lead Auditor
- CompTIA Security+
- Microsoft Security Certifications
- GIAC Certifications
- CEH
What we can offer you
- Competitive salary.
- Discretionary annual bonus.
- 25 days holiday per annum (pro-rata), plus statutory public holidays.
- Workplace pension scheme with enhanced employer contributions.
- Enhanced Company Maternity and Paternity Pay.
- Life assurance.
- Access to medical plan including a range of private treatments (after probation period).
- Health & Wellbeing app with access to discounts.
- Company sick pay scheme.
- Electric vehicle scheme (after 9 months of employment).
- Sustainable travel scheme.
- Annual complimentary bike maintenance.
- Free onsite parking.
- Cycle to work scheme.
- Long service award scheme.
- Access to an Employee Assistance programme and helpline.
- Discount on accommodation, food and beverages at affiliated hotel.
- Discount on food/beverage at affiliated pub.
- You’ll also get all kinds of other great perks, like social events and special employee offers.
