Risk and Assurance Specialist

Are you looking for a challenging and rewarding career that makes a real difference? Join the GCO team at easyJet and become an ambassador for cyber security and digital safety. As a member of our team, you'll be at the forefront of transforming the way we think about digital safety, bringing commerciality and pragmatism to complex business challenges. We're not afraid of new ways of doing things and we're always solution-focused when faced with a problem. We want new joiners to make an impact and build relationships across the business at all levels.

As part of the Digital Safety Team, you'll operate with a unique enterprise-wide remit, incorporating data, processes, and technology security into the heart of what we do to ensure the safety of our customers. Our team is dedicated to taking action, not just talking about it, and we value diversity and inclusivity to drive innovative thinking. We recognise that everyone has different ways of bringing energy to their work and we have a vibrant team culture that supports this.

As a member of our team, you'll be at the centre of the action, working operationally to influence the direction of travel in digital safety. We're dedicated to investing in our team with excellent hires and continuing professional development opportunities. Come join us and make a lasting impact on the thousands of customers who fly with us each and every day. If you're excited about being part of Team Orange and delivering a crucial function across both assurance and security operations, we want you to be a part of our team

**Job Purpose**

**The risk and assurance specialist is responsible for delivering our risk management framework through identifying, capturing, and measuring cyber security risks within easyJet. This role encompasses working with multiple diverse business areas to capture the relevant information that results in the representation of well-defined risk information to support informed decisions in the relevant forums.**:
**This role supports the overall Digital Safety Assurance team’s objectives and provides visibility of key information relating to our regulatory compliance or control maturity.**:
**Job Accountabilities**:

- Operate the Digital Safety risk framework to assess and record cyber risk within easyJet.
- Work with multiple functions ranging from technical IT through to business facing functions to capture the full spectrum of related risk information.
- Operate the digital safety supplier assurance process to understand and capture risks related to our supply chain.
- Identify and capture potential gaps in our regulatory compliance environment and work with the Digital Safety Compliance Manager and the Data Protection team to resolve.
- Identify and capture information relating to our Data Governance framework and work with the Digital Safety Data Management Manger to resolve.
- Work with the IT Quality and Risk function to align on the IT risk relevant areas when dealing with Digital Safety risks.
- Present findings at relevant risk forums to support the treatment of identified risks.
- Provide training and advice to colleagues in the Cyber Governance, Compliance, Assurance and Risk team, and other departments on the use of the risk methodology to encourage consistent risk measurement and reporting across the company.
- Update the risk register of information assets with risks associated with each asset.
- Maintain the risk register of exceptions, assess and record the risk associated with any exceptions.
- Develop and maintain bow-tie models of key risks which tie in with other team member’s measurements of control effectiveness.
- Model statistical risk models based on risk models (e.g. Monte Carlo analysis).
- Maintain up to date awareness of the threat landscape and how it affects the probability of risk events occurring

**Requirements of the Role**

We would like someone CRISC or similar (eg Institute of Risk Management)

Somebody with CISSP, COMPTIA Security + or other security qualification and Information Security or industry relevant qualifications

**Business skills**:
Demonstrates effective communication skills.

Someone who plans, schedules and monitors own work (and that of others where applicable) competently within limited deadlines and according to relevant legislation, standards and procedures.

Somebody who demonstrates an analytical and systematic approach to issue resolution, takes the initiative in identifying and negotiating appropriate personal development opportunities.

Someone who understands how own role impacts security and demonstrates routine security practice and knowledge required for own work.

**Location & Hours of Work**

This is a full-time hybrid role with 1-2 days in the office weekly based in Luton.

**About easyJet**

At easyJet our aim is to make low-cost travel easy - connecting people to what they value using Europe’s best airline network, great value fares, and friendly service.

It takes a real team