EXPERIENCED PROFESSIONALS

Job title: Cyber Risk and Governance Manager
Location: Warton. We offer a range of hybrid and flexible working arrangements – please speak to your recruiter about the options for this particular role.
Salary: Circa £57,000 dependent on skills and experience

What you’ll be doing:

• Work collaboratively with stakeholders across the Air Sector and the wider BAE Systems business to understand and capture cyber risk across projects, programmes, and the digital estate. Support the identification and delivery of appropriate remediation actions
• Partner with Lines of Business (LoB) and Functional teams to raise awareness of Cyber Security standards and promote the adoption of improved, secure ways of working
• Ensure cyber risk and governance processes align with internal standards, policies, and Secure by Design (SbD) principles, while meeting all legal and regulatory obligations
• Produce clear, data-driven reports that track cyber risk trends, key performance indicators (KPIs), key risk indicators (KRIs), and threat intelligence – supporting effective decision-making across the Air Sector and wider business
• Build positive relationships across departments, including Security, Architecture, Cyber Security, Manufacturing, and Engineering, to enable seamless collaboration and shared success
• Support the Head of Cyber Risk and Governance in developing, maintaining, and embedding robust risk management methodologies, tools, and practices – ensuring alignment with industry best practice and business-as-usual operations

Your skills and experiences:

Essential

• Good understanding of business environments, with experience in sectors such as defence, government, banking, or utilities
• Experience with cyber risk management approaches, including awareness of industry standards and good practices
• Working knowledge of IT infrastructure; awareness of Operational Technology (OT) environments is a plus

Desirable

• Experience in a Governance, Risk, Compliance, and Assurance (GRC&A) role, ideally within a large or complex organisation
• Comfortable working with a variety of stakeholders and collaborating within cross-functional teams

Benefits:
As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts – you may also be eligible for an annual incentive.
The Air Cyber Team:
The Air Sector Cyber Security Team plays a critical role in protecting the organisation’s digital assets and ensuring resilient cyber security across all operations. Our team of experienced professionals brings together deep expertise across multiple cyber disciplines, working collaboratively to manage risks, respond to incidents, ensure compliance with internal policies and external standards, and enable secure business operations—both internally and throughout our supply chain.
We take a proactive approach to identifying, assessing, and mitigating cyber risks across the Air Sector. By integrating cyber security into everything we do, we help the organisation stay ahead of evolving threats and maintain a strong, unified security posture across the business.
Here you will have the opportunity to develop your skills and knowledge to work across the entire sector, having contact with Stakeholders at all levels. Your time in this role will be a journey of discovery of what we do here at BAE Systems. Our office days are Tuesdays and Thursdays.
Why BAE Systems?
This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.
Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.
Closing Date: 3rd July 2025
We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

LI-JE1

LI-Hybrid

• Work collaboratively with stakeholders across the Air Sector and the wider BAE Systems business to understand and capture cyber risk across projects, programmes, and the digital estate. Support the identification and delivery of appropriate remediation actions
• Partner with Lines of Business (LoB) and Functional teams to raise awareness of Cyber Security standards and promote the adoption of improved, secure ways of working
• Ensure cyber risk and governance processes align with internal standards, policies, and Secure by Design (SbD) principles, while meeting all legal and regulatory obligations
• Produce clear, data-driven reports that track cyber risk trends, key performance indicators (KPIs), key risk indicators (KRIs), and threat intelligence – supporting effective decision-making across the Air Sector and wider business
• Build positive relationships across departments, including Security, Architecture, Cyber Security, Manufacturing, and Engineering, to enable seamless collaboration and shared success
• Support the Head of Cyber Risk and Governance in developing, maintaining, and embedding robust risk management methodologies, tools, and practices – ensuring alignment with industry best practice and business-as-usual operation