Cyber Incident Lead

In this role you lead cyber incident response across the BA estate, 24/7 on call, shaping how we identify, respond to and recover from incidents. You will develop and maintain incident response processes and translate complex technical concepts for diverse stakeholders. You’ll collaborate with cyber teams, OpCos and suppliers to improve detection, tools and lessons learned, while contributing to a stronger in-house digital forensics capability. This position supports BA’s mission to connect Britain with the world by safeguarding operations across a global network.

• staff travel benefits including unlimited basic and premium standby tickets
• up to 30 discounted ‘Hotline’ airfares per year for you and family
• opportunities for progression across the business

• Lead the organisation-wide cyber incident response efforts 24/7
• Develop, maintain and manage incident response processes
• Present complex technical information to varied stakeholders
• Engage with business stakeholders to build relationships
• Perform risk assessments with vague or ambiguous information
• Support development of in-house digital forensics capabilities
• Collaborate with cyber teams to tune security tools and controls
• Coordinate incident response with other operating companies and share threat intelligence
• Manage relationships and continuous improvement with partners/suppliers involved in the incident lifecycle

• Relevant cyber incident response experience in a large, complex organisation
• Experience using MITRE ATT&CK
• Analytical, methodical, detail-oriented
• Strong communication to translate technical issues for technical and non-technical audiences
• Ability to stay calm and prioritise under pressure

• Strong communication
• Stakeholder management
• Calm under pressure
• MITRE ATT&CK
• Digital forensics (Desirable)
• Understanding of aviation, transport, or critical infrastructure (Desirable)