Job Description

.
Based at Manchester Airport
Permanent Role
Office or Flexible/Hybrid working for a better work/life balance
We are proud to be a diverse employer, and we welcome candidates from all backgrounds
MAG
At MAG we provide the airport facilities and travel services that people need to connect with the world. As the largest UK-owned airport operator, we serve over 60 million passengers a year from Manchester, London Stansted, and East Midlands Airports. With over 270 destinations across the globe, our businesses not only bring people together but also support the prosperity of the regions in which we operate. At MAG, we recognise creating a first-class journey for our customers starts by creating a first-class career journey for our colleagues and we are committed to building inclusive environments in which our people can thrive. You'll also have access to some great benefits including:

• Bonus scheme
• 10% company contribution pension
• Car allowance
• Private medical scheme
• 25 days holiday plus bank holidays
• Free parking
• Subsidised public transport
• Huge range of company discounts
• 2 volunteering days per year
• Free Virtual GP service, available 24 hours a day, 7 days a week
• Care Concierge service

The Role
As Head of Information Security (CAVU), you'll be a key member of the Chief Information Security Officer's (CISO's) team, responsible for leading the strategic and operational delivery of information security across CAVU. You'll act as a bridge between business priorities and technical security controls, ensuring compliance, risk management, and incident response are embedded into CAVU's operations.
This senior leadership role requires a strong technical background, strategic thinking, and the ability to influence across business units. You'll lead the development of security programs, manage cyber risk, oversee incident response, and ensure alignment with regulatory and commercial requirements. You'll also play a pivotal role in vendor management, budget planning, and future capability development.
What will make you successful?
You'll bring a minimum of five years' experience in information security or data privacy, including at least two years in a leadership role. You'll have:

• Proven leadership in cyber security strategy, operations, and compliance
• Strong understanding of ISO27001, GDPR, US privacy laws, and frameworks like ITIL and COBIT
• Experience managing cyber risk, incident response, and security operations
• Ability to influence senior stakeholders and collaborate across IT and business teams
• Excellent communication and presentation skills, with a focus on strategic alignment
• Certifications such as CISSP, ISO27001 Lead Auditor, or equivalent
• Experience in developing and managing budgets, business cases, and vendor relationships
• Familiarity with threat intelligence, vulnerability research, and emerging technologies

This is a fantastic opportunity to shape the future of information security at CAVU, ensuring resilience, compliance, and innovation remain at the heart of our digital operations.
Equal Opportunities & Reasonable Adjustments
At MAG we believe in the importance of diversity & inclusion for all. We are committed to creating a workforce that is reflective of our society. As such we welcome applications from candidates from all backgrounds.
We're also committed to well-being with a focus on mental health and supporting colleagues from underrepresented groups through our Colleague Resource Groups.
As a Disability Confident employer, we are committed to creating an environment where candidates and employees can perform at their optimum. Please let us know if we can provide you with any reasonable adjustments to aid your application or interview process.
You can contact the team by emailing HR.Recruitment@MAGAirports.com
Our Colleague Resource Groups include: Women's Network, Embrace - Race & Ethnicity Group, Fly With Pride (LGBTQIA+), Mental Health, Parent & Carers, Disabilities including neurodiversity.
.

Skills Required