Cybersecurity Assurance Manager

Full-time

Contract Type: Permanent

Directorate: Iberia CDIO

**Company Description**:
IAG Tech is part of International Airlines Group, one of the world’s leading airline groups, with 598 aircraft flying to over 270 destinations, carrying more than 120 million passengers each year.

IAG Tech provides world-class IT solutions to IAG’s operating companies which include Aer Lingus, Avios, British Airways, IAG, IAG Cargo, Iberia, Iberia Express, LEVEL and Vueling.

Brought together in 2019, we are a unique community with a shared vision to deliver **Technology Excellence** and be recognised as industry leaders in the use of technology.

Our mission is to delight customers, enable employees, accelerate business performance, protect our business and increase shareholder value, through the innovative and agile use of technology and data.

We use product-centric delivery teams using agile methods to implement new capabilities at pace and maximise business outcomes. With a relentless focus on improving system performance and stability, we continually strive to find new and better ways to innovate and support the Group.

**Purpose of the role**

This role manages all aspects of defining and stabilizing Cybersecurity tasks services and activities embedded in all the IT processes in IBERIA, mainly focused on implementing and improving security governance and Assurance processes over the IB Digital Channels, software development pipelines/DevSecOps/S-SDLC and cloud environments, including:

- Assesses the nature of the outcomes and objectives to be covered by the existing IT processes and determines what resources are needed to fulfill the gap of the lack of Cybersecurity principles within company business flows.
- Collaborate and coordinates with business and technical leads and executive team to develop and implement best security practices to anticipate, address, and mitigate the effects of Cybersecurity risks impacting IB.
- Coordinates and leads communications and conference calls with the team, stakeholders, customers and third parties to provide updates and follow up on improving security capabilities across the IB IT ecosystem.
- Documents all strategies for security capabilities implementation using established methodologies and practices, conducting analysis for improvement of the IB security posture defining follow up actions and recommendations for stakeholders.

**Accountabilities**

Within this role you will
- Managing all staffing and operations, including hiring, work scheduling, performance management, rewards and recognition, training, and career development.
- Acting as a conduit between IB Cyber Security and business, providing cyber consultancy support on internal capability, processes, and tooling.
- Setting in place standards and good practices and the means to measure progress and security capability with a view to moving away from point in time assurance assessments and security gates to continuous monitoring of pipelines.
- Assessing security capabilities (people, processes, and technology) to fulfill security gaps as well as development pipelines and across the and ideates plans on improvement roadmaps.
- Agrees improvement plans, build capability, and help coach development teams, working with process owners to change and improve processes, set standards and put in place metrics.
- Supporting security knowledge and skills growth across the group by helping build the emerging cybersecurity “tech guild” and encourage engagement with relevant external groups and chapters e.g. OWASP
- Challenging cyber understanding through engagement events, competitions and similar that enhance cyber awareness and skills and engage developer communities.
- Providing regular status updates to internal and external stakeholders, including executive leadership.
- Doing a comprehensive examination of a problem's core causes, including who, what, when, where, why, and how it originated the existing risks.
- Examining information from internal departments impacted by a problem to find areas for improvement.
- Tracking problems throughout their lifecycle and ensuring action items are completed by their due date.
- Collaborating across business and technology organizations to improve processes and procedures for effectively coordinating actions.
- Engage in continuous improvement via regular reporting metrics and use these metrics to drive team and process improvements (including but not limited to processes, technology, team, customer service, methodologies, and capabilities)
- Effectively manage projects to meet deadlines and achieve results.
- Help and communicate with other departments and escalation points relevant to troubleshooting and resolving customer issues.
- Develop and maintain effective relationships with other departments and executive leaders.
- Generate critical reports for Management including, but not limited to, system availability, service level agreements, ticket resolution, and customer issues