Salary: Up to £54,790 per annum dependent on experience
Contract Type: Permanent – Full Time
Security Level: SC
Location: Gatwick – 2 days per week office attendance expected
Visa Restrictions: This position does not offer visa sponsorship
Closing Date: Monday 3rd August 2026
Interview Date: W/C Monday 17th August 2026
We are the UK's aviation and aerospace regulator and recognised as a world leader in its field. Our activities are diverse, enabling the aviation industry to meet the highest safety standards, and we pride ourselves on our ability to adapt to the constantly evolving aviation environment.
The Role
The Cyber Security team within the Aviation Security Directorate provides effective and proportionate regulation of cyber security risk to the UK aviation industry. The team's primary objective is to meet UK, European, and international aviation regulatory obligations for cyber security.
The Cyber Security Expert Advisor role sits within the Cyber Security Policy team that leads the development of the strategic direction of Cyber Security Policy in UK Aerospace.
The Cyber Security Policy Expert Advisor is primary responsibility is to support colleagues within the team to undertake the following:
- Offering advice to the Oversight and Certification teams on the interpretation of cyber security policy
- Engaging with Department for Transport and other Government Departments
- Collaborate with industry and other external stakeholders to ensure policy developments are fully communicated.
- Influencing global policy through the teams ICAO Panel and Working Group activity
- Coordinate the delivery of industry engagement activities such as meetings, working groups and conferences.
- Delivery of internal panels and boards such as the Cyber SRP and CGB
- Actively engage with other CAA departments on cross cutting issues
- Development and delivery of CAAi Cyber security training
The Cyber Security Expert Advisor will also provide operational support, where required to the wider Cyber Team to ensure that objectives are achieved in a timely, efficient, and accurate manner.
Core Accountabilities
- Support the development and maintenance of cyber security policy for UK aviation by contributing to policy interpretation, impact assessments, risk analysis, and options appraisals under the guidance of senior colleagues.
- Assist team members in the preparation of regulatory proposals, including drafting background material and supporting instructions to legal teams on the development or amendment of cyber security regulations.
- Provide researched and evidence-based input to support advice given to Oversight and Certification teams on the interpretation and application of cyber security policy, escalating complex issues where appropriate.
- Support engagement with the Department for Transport, other Government Departments, and external stakeholders by preparing briefing materials, notes, and presentations, and helping to ensure consistent communication of cyber security policy.
- Assist with activities that contribute to international and industry engagement, including support to ICAO related workstreams and maintenance of records and inputs that support global policy development.
- Deliver the Cyber Security Industry Working Group (CSIWG), including meeting coordination, agenda preparation, minute taking, and tracking of actions and deliverables.
- Lead the preparation and delivery of internal panels and boards, including coordinating papers, managing documentation, and supporting follow up actions.
- Deliver operational expertise across the wider Cyber Security team, helping to ensure that team deliverables are completed accurately, efficiently, and to agreed timescales.
- Actively build knowledge of aviation cyber security regulation, UK and international frameworks, and internal governance processes, identifying opportunities to improve ways of working and personal capability.
- Act as a point of contact for industry, stakeholders, and colleagues through management of the Cyber mailbox.
- Provide expertise in the development and delivery of CAAi Cyber training courses domestically and internationally including Cyber Security Oversight, Cyber Security Awareness and Part-IS Familiarisation.
About You
Essential:
- Understanding and interest in cyber security in aviation
- Expert knowledge of security and/or safety regulations within aviation
- Strong verbal and written communication skills with a proven ability to communicate effectively at all levels and to produce concise, unambiguous discussion papers for presentation at various bodies within the CAA and industry both domestically and internationally
- A knowledge of risk-based principles
- A team player with an adaptable work ethos, analytical and lateral thinker with an eye for detail that can work under pressure and to tight deadlines and has a professional confident approach to day-to-day work.
- Strong interpersonal skills, able to demonstrate the application of personal values and behaviours that are a role model for the values of the CAA.
- Self-motivated and willing to work flexibly using their initiative, reaching sound judgment but able to identify when to seek guidance.
- Knowledge and/or experience of the aerospace industry, including airports, ANSP’s, air carriers
- Expertise in drafting accurate and influential written documents in a wide variety of styles, tailored to the appropriate audience
- Ability to work for periods unsupervised, as the situations demands
- Ability to explain technical issues clearly, including to internal and external stakeholders
- The ability to interpret different systems such as SharePoint, Quality Management (QPulse), EPT and Cygnum to provide data on request.
- Proficient in Microsoft applications
- Able to attain and maintain SC security vetting
Desirable
- Knowledge of Project Management principles
- Knowledge and experience of cyber standards, policy, and guidance (e.g., ISO27001, NIST, Part-IS, NIS)
- Experience in working with data and data analytics software (PowerBI)
- Cyber technical expertise gained through relevant experience or formal training.
- Able to manage different workstreams to differing timescales.
- Confident in interacting and challenging CAA colleagues across the CAA
- Knowledge and understanding of the implementation of management systems with experience in implementing policies and procedures.
- A good understanding of data protection principles.
- Experience working in a regulatory compliance or project management-based environment.
Additional Information
For many appointments within the CAA, these roles require access to operationally sensitive infrastructure and/or Nationally Protected information. For these roles the post holders must undergo National Security Vetting and achieve the appropriate level of clearance.
SC - To be vetted we will usually expect a reasonable period of residency in the UK so that meaningful checks can be undertaken. For this role this will need to be 5 years.
If you do not meet these requirements, we may not be able to accept your application.
For more information on SC clearance please visit - Vetting explained - GOV.UK (www.gov.uk)
The CAA values high ethical standards and personal integrity among employees. If invited for interview you will be asked to complete a declaration of interest.
Relocation & Property
The CAA will be relocating from Aviation House (Our Gatwick Office) to new premises in a few years’ time. Our move is driven by strategic, operational and environmental considerations.
We will be moving to a new local home, up to a 15-mile radius of Aviation House, to minimise disruption for our valued colleagues and customers.
We are now working with colleagues and visitors to understand what we need in our new office, before we start our property search. We will sell Aviation House and land, vacate the site and move to new premises, but we do not expect to move before 2028
Inclusive Recruitment
We are committed to building a diverse and inclusive workforce and welcome applications from all backgrounds. As a Disability Confident employer, candidates who meet the minimum requirements will be guaranteed an interview. Find out more about the Disability Confident Scheme. If you require any adjustments during the recruitment process, please let us know.
Use of Artificial Intelligence by candidates in the CAA recruitment process
We recognise that many of our candidates find Artificial Intelligence to be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be rejected on that basis.
Working With Us
Explore What We Offer section on our careers website to find out about our benefits and how we support work-life balance.
Our Values
Do The Right Thing, Never Stop Learning, Build Collaborative Relationships, Respect Everyone –
We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.
No recruitment agencies please.
Job Segment: Cyber Security, Compliance, Project Manager, Security, Legal, Aviation, Technology
