To provide Security Threat assessment, design and Assurance in support of Operational systems for UK Air-Traffic Management services. Leading end-to-end security Assessment and assurance activities for Centralised security services across the organisation Other Duties Include

• Develop and implement robust security designs tailored to CNI environments, ensuring compliance with CAA regulatory standards
• Create detailed security architecture plans, blueprints, and diagrams for physical and cyber systems.
• Conduct thorough risk assessments to identify potential vulnerabilities in systems, facilities, or processes
• Work closely with engineering, IT, operations, and external contractors to integrate security into all stages of project lifecycle
• Provide technical assurance that security systems (both physical and cyber) are correctly implemented and function as designed
• Develop and implement incident response plans as part of the overall security design
• Prioritize competing tasks and projects based on criticality and resource availability
• Communicate complex security concepts effectively to both technical and non-technical stakeholders
• The above is indicative of the Line Management structure and reporting lines
  
  Degree in a relevant Business or IT technical qualification or equivalent of knowledge acquired through experience, other qualifications, and training/development
• Subject Matter Expert in a wide range of security technologies, with working knowledge of their integration, configuration, and data needs
• Relevant architectural experience, including an understanding of NIST, SABSA, TOGAF and Zachman or equivalent frameworks
• Ability to articulate complex issues and concepts to a wide range of recipients both written and verbally
• Strong, credible impact, with a demonstrated capability to resolve conflict; build, maintain and utilise relationships with key internal and external stakeholders to achieve optimum business goals
• Collaborative working style with a clear focus on delivering outcomes
Desirable
• Experience of the development and implementation of appropriate risk mitigation plans, policies, processes, and technical controls
• Good working knowledge of an Information Security Management System and the ISO2700x / Cyber Essentials series of standards
• Demonstrable experience in cloud architectures
• Certified to CISSP, CISM, CISA, CRISC or equivalent professional certification
• Experience in systems delivery concepts including analysis, design, implementation, testing and support
• An accomplished, credible and respected subject matter expert with well-developed communication, influencing and negotiation skills gained in a complex organisation undergoing significant transformation
  
  NATS is the UK's leading air navigation service provider, handling over 2.4 million flights each year. We provide air traffic control services from two control centres and at airports around the UK. We also provide a wide range of commercial products and solutions internationally. Our people are at the heart of our purpose to advance aviation and keep the skies safe, We are proud to offer a fantastic total reward package to help you thrive both personally and professionally - for more information on what NATS can offer you please visit - Why NATS? - NATS
We have adopted agile working to provide greater flexibility and increased choice over working arrangements, with the opportunity for this role to work in our modern office facilities as well as remotely. Find out more here. If you share our passion to advance aviation and keep the skies safe - we would like to hear from you whatever your age, sex, race, faith, sexual orientation, gender identity, gender expression, visible or invisible disability. Individuals that bring different perspectives, skills, life experiences and backgrounds help us be at the forefront of our industry.