We are easyJet – a FTSE listed, multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic or Orange travel brand in Europe.
We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.
What makes us easyJet? Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.
READ ON IF YOU
- Have experience in cyber security risk management or information security
- Enjoy working collaboratively across diverse teams and business functions
- Are passionate about embedding digital safety principles in a fast-paced, innovative environment
- Want to play a key role in protecting a major airline’s digital assets and regulatory compliance
THE TEAM
You will join a team of cyber security professionals dedicated to making Digital Safety as fundamental as Aircraft Safety. Working closely with operational, commercial, regulatory, and audit functions, you will support the Senior Digital Safety Risk Manager, Head of Digital Safety Assurance, and Technical Security and Business Partner teams to deliver the Digital Safety vision.
THE ROLE
As a Digital Safety Risk and Assurance Specialist, you will be responsible for delivering our risk management framework by identifying, capturing, and measuring cyber security risks across easyJet. You will work with multiple business areas to gather relevant risk information and present well-defined risk insights to support informed decision-making. Your role will also provide visibility of key regulatory compliance and control maturity information to support the wider Digital Safety Assurance team.
What you will do:
- Operate the Digital Safety risk framework to assess and record cyber risks
- Collaborate with technical IT and business functions to capture a full spectrum of risk information
- Manage the digital safety supplier assurance process to identify supply chain risks
- Identify gaps in regulatory compliance and work with compliance and data protection teams to resolve them
- Support the Data Governance framework alongside the Digital Safety Data Management Manager
- Align with IT Quality and Risk functions on relevant digital safety risks
- Present findings at risk forums to aid risk treatment decisions
- Provide training and advice on risk methodology to encourage consistent risk measurement and reporting
- Maintain risk registers for information assets and exceptions, assessing associated risks
- Develop and maintain bow-tie models and statistical risk models such as Monte Carlo analysis
- Stay up to date with the threat landscape and its impact on risk probabilities
