How your CV stacks up
Upload your CV to see how well it fits this job role
?%
CISO
CISO – Chief Information Security Officer
Overview Looking for a challenge in one of the world’s leading airline Groups and a dual FTSE 100 and IBEX 35 listed company? The Group combines airlines in Ireland, the UK, and Spain with key non-airline businesses, enabling them to enhance their presence in the aviation market.
Purpose of the Role
The Group CISO is accountable for protecting the organisation through strong cybersecurity leadership, enterprise-wide governance, and strategic oversight of cyber risk. The role ensures that the Group has:
- Secure, resilient, and efficient technology capabilities
- Confident digital transformation leadership by operating companies
Key Accountabilities & Responsibilities
-
Cyber Strategy & Leadership
- Define and communicate a clear Group Cyber Security Strategy aligned with business goals
- Influence Group executives, OpCo CISOs, Boards, and senior stakeholders
- Drive cultural change that embeds security awareness and resilience
-
Governance, Risk & Compliance
- Own cyber policies and standards; ensure consistent adoption across OpCos
- Lead Group Cyber Risk Management in line with enterprise risk frameworks
- Ensure compliance with GDPR, NIS2, PCI-DSS, and emerging regulations
-
Performance, Insight & Reporting
- Establish KPIs, dashboards, and metrics for cyber maturity
- Provide insights and reporting to CIO, Audit Committee, and Board
- Ensure timely reporting from SOC, Governance, Assurance, and Performance teams
-
Security Operations, Incident & Crisis Management
- Provide oversight of SOC, CTI, CIRT, and SOAR
- Lead high-impact incident response and crisis communications
- Ensure cyber resilience, continuity, and recovery practices
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
Technology & Architecture Governance
- Guide secure design principles across technology roadmaps
- Influence cloud, data, infrastructure, and platform security decisions
- Assess risks and opportunities from AI, automation, and quantum computing
-
Assurance & Quality Oversight
- Oversee cyber assurance activities across OpCos
- Translate assurance findings into improvement plans
- Support delivery assurance where required
-
People, Talent & Operating Model
- Lead the Group Cyber & Technology Office leadership team
- Upskill teams and close capability gaps
- Ensure spans, layers, and accountabilities remain fit for purpose
Competencies (Required for Executive Role)
- Strategic Leadership: Thinks enterprise-wide, anticipates future risks, and shapes long-term direction for the business
- Influencing & Stakeholder Management: Engages senior executives and regulators with clarity and credibility
- Cyber & Technology Expertise: Deep understanding of cyber operations, governance, threat landscapes, and technology risk
- Change Leadership: Drives cultural adoption of security and leads through ambiguity
- Crisis & Incident Leadership: Responds decisively during major incidents with structured decision-making
- Talent Development: Builds high-performing teams and ensures future-ready capability
- Data-Driven Decision Making: Uses metrics, insights, and analytics to shape strategy and priorities
Required Skills, Qualifications & Experience
- Experience
- Extensive experience (10+ years) in senior cybersecurity leadership roles in complex, multinational, or regulated environments
- Proven track record overseeing Security Operations, Governance, Architecture, and Risk Management functions
- Experience interacting with Boards, Audit Committees, regulators, and external partners
- Direct experience leading major cyber incidents and crisis response
Get help with your application
Your very own career expert that helps elevate your application to the next level.
-
Knowledge & Skills
- Deep knowledge of enterprise cybersecurity frameworks (NIST CSF, ISO 27001, CIS Controls)
- Strong understanding of cloud security, data protection, identity, and emerging technologies
- Exceptional leadership, communication, and stakeholder influence skills
- Ability to translate complex cybersecurity concepts into business language
- High analytical capability using metrics, dashboards, and performance insights
-
Preferred Certifications
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CRISC (Certified in Risk and Information Systems Control)
- CCSP (Certified Cloud Security Professional)
- SABSA (or equivalent enterprise architecture certifications)
- ITIL (or equivalent service management certifications)
Further Information
Department: Talent & Development Reporting to: Simon Young Contract type: Regular Location: Flexible across IAG companies
Part of a diverse and inclusive business, you’ll contribute to connecting people, businesses, and countries through aviation—a force for good. Each operating company manages its own recruitment, careers, and development.
At IAG, we are driven by the purpose of:
"Connecting people, businesses and countries using aviation as a force for good. We believe in the transformative power of flight—enabling personal and professional connections, supporting global trade, and fostering discovery."
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location