Cyber Security Manager

About the role

Prestwick Aerosystems is looking for a Cyber Security Manager to own the full GRC estate and lead the operational delivery of digital security and compliance across the organisation. Reporting to the Digital Security Officer, the role bridges strategic risk governance with day‑to‑day business operations.

Key responsibilities

• Own the GRC Suite and Active Risk Manager portal, maintaining continuous control tracking and audit evidence.
• Build and sustain the ISMS policy suite from scratch, aligning with ISO 27001:2022, the Airbus Digital Handbook and Airbus Group directives.
• Maintain Airbus Cybersecurity Level compliance, design internal audit schedules and manage remediation action plans.
• Lead cybersecurity maturity assessments using NIST CSF 2.0 and conduct industrial threat modelling.
• Integrate digital ISMS with physical Safety Management Systems to ensure EASA Part‑IS regulatory alignment.
• Govern Microsoft Defender XDR policies, act as the operational contact for the Managed Security Service Provider and drive post‑incident RETEX reviews.

Required profile

• Extensive experience leading Information Security Management, GRC or cyber operations in aerospace, defence, manufacturing or heavy industry.
• Proven track record designing, building and delivering an enterprise ISMS.
• Deep expertise in ISO 27001:2022, NIST CSF 2.0, EASA Part‑IS and formal risk methodologies (EBIOS RM, ISO 27005, NIST 800‑30).
• Professional security governance certification (CISM, CRISC, CISA, CISSP or ISO 27001 Lead Auditor/Implementer).

Required skills

• ISO 27001:2022 and NIST CSF 2.0 frameworks.
• GRC platforms such as FENCE or MetricStream.
• Microsoft Defender XDR stack (Endpoint, Servers, Office 365).
• Risk methodologies: EBIOS RM, ISO 27005, NIST 800‑30.
• Industrial OT security, network segmentation and automation security.

What we offer

• 37‑hour working week with a half‑day Friday.
• Defined contribution pension (4% employee / 8% employer).
• 33 days annual leave, increasing with service.
• Annual performance‑linked bonus and life assurance (4× salary).
• Virtual GP service, Employee Assistance Programme and wellbeing support.
• Professional development, training opportunities and free on‑site parking.