Salary: Up to £54,790 per annum dependent on experience Contract Type: Permanent – Full Time Security Level: SC Location: Gatwick – 2 days per week office attendance expected Visa Restrictions: This position does not offer visa sponsorship Closing Date: Monday 3rd August 2026 Interview Date: W/C Monday 17th August 2026 We are the UK's aviation and aerospace regulator and recognised as a world leader in its field. Our activities are diverse, enabling the aviation industry to meet the highest safety standards, and we pride ourselves on our ability to adapt to the constantly evolving aviation environment. The Role The Cyber Security team within the Aviation Security Directorate provides effective and proportionate regulation of cyber security risk to the UK aviation industry. The team's primary objective is to meet UK, European, and international aviation regulatory obligations for cyber security. The Cyber Security Expert Advisor role sits within the Cyber Security Policy team that leads the development of the strategic direction of Cyber Security Policy in UK Aerospace. The Cyber Security Policy Expert Advisor is primary responsibility is to support colleagues within the team to undertake the following: <ul style="margin-top:3.0pt;margin-bottom:1.0pt"> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Offering advice to the Oversight and Certification teams on the interpretation of cyber security policy </li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Engaging with Department for Transport and other Government Departments</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Collaborate with industry and other external stakeholders to ensure policy developments are fully communicated.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Influencing global policy through the teams ICAO Panel and Working Group activity</li> <li style="margin:0.0cm 0.0cm 0.0cm 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Coordinate the delivery of industry engagement activities such as meetings, working groups and conferences.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Delivery of internal panels and boards such as the Cyber SRP and CGB</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Actively engage with other CAA departments on cross cutting issues</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Development and delivery of CAAi Cyber security training</li> </ul> The Cyber Security Expert Advisor will also provide operational support, where required to the wider Cyber Team to ensure that objectives are achieved in a timely, efficient, and accurate manner. Core Accountabilities <ul style="margin-top:3.0pt;margin-bottom:1.0pt"> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Support the development and maintenance of cyber security policy for UK aviation by contributing to policy interpretation, impact assessments, risk analysis, and options appraisals under the guidance of senior colleagues.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Assist team members in the preparation of regulatory proposals, including drafting background material and supporting instructions to legal teams on the development or amendment of cyber security regulations.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Provide researched and evidence-based input to support advice given to Oversight and Certification teams on the interpretation and application of cyber security policy, escalating complex issues where appropriate.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Support engagement with the Department for Transport, other Government Departments, and external stakeholders by preparing briefing materials, notes, and presentations, and helping to ensure consistent communication of cyber security policy.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Assist with activities that contribute to international and industry engagement, including support to ICAO related workstreams and maintenance of records and inputs that support global policy development.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Deliver the Cyber Security Industry Working Group (CSIWG), including meeting coordination, agenda preparation, minute taking, and tracking of actions and deliverables.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Lead the preparation and delivery of internal panels and boards, including coordinating papers, managing documentation, and supporting follow up actions.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Deliver operational expertise across the wider Cyber Security team, helping to ensure that team deliverables are completed accurately, efficiently, and to agreed timescales.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Actively build knowledge of aviation cyber security regulation, UK and international frameworks, and internal governance processes, identifying opportunities to improve ways of working and personal capability.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Act as a point of contact for industry, stakeholders, and colleagues through management of the Cyber mailbox.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Provide expertise in the development and delivery of CAAi Cyber training courses domestically and internationally including Cyber Security Oversight, Cyber Security Awareness and Part-IS Familiarisation.</li> </ul> About You Essential: <ul style="margin-top:3.0pt;margin-bottom:1.0pt"> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Understanding and interest in cyber security in aviation</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Expert knowledge of security and/or safety regulations within aviation</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Strong verbal and written communication skills with a proven ability to communicate effectively at all levels and to produce concise, unambiguous discussion papers for presentation at various bodies within the CAA and industry both domestically and internationally</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">A knowledge of risk-based principles </li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">A team player with an adaptable work ethos, analytical and lateral thinker with an eye for detail that can work under pressure and to tight deadlines and has a professional confident approach to day-to-day work.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Strong interpersonal skills, able to demonstrate the application of personal values and behaviours that are a role model for the values of the CAA.</li> <li style="margin:1.5pt 0.0cm 1.5pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Self-motivated and willing to work flexibly using their initiative, reaching sound judgment but able to identify when to seek guidance.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Knowledge and/or experience of the aerospace industry, including airports, ANSP’s, air carriers</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Expertise in drafting accurate and influential written documents in a wide variety of styles, tailored to the appropriate audience</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Ability to work for periods unsupervised, as the situations demands</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Ability to explain technical issues clearly, including to internal and external stakeholders</li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">The ability to interpret different systems such as SharePoint, Quality Management (QPulse), EPT and Cygnum to provide data on request.</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Proficient in Microsoft applications</li> <li style="margin:1.5pt 0.0cm 1.5pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Able to attain and maintain SC security vetting</li> </ul> Desirable <ul style="margin-top:3.0pt;margin-bottom:1.0pt"> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Knowledge of Project Management principles</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Knowledge and experience of cyber standards, policy, and guidance (e.g., ISO27001, NIST, Part-IS, NIS)</li> <li style="margin:3.0pt 0.0cm 1.0pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience in working with data and data analytics software (PowerBI)</li> <li style="margin:1.5pt 0.0cm 1.5pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Cyber technical expertise gained through relevant experience or formal training.</li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Able to manage different workstreams to differing timescales. </li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Confident in interacting and challenging CAA colleagues across the CAA</li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Knowledge and understanding of the implementation of management systems with experience in implementing policies and procedures.</li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">A good understanding of data protection principles.</li> <li style="margin:1.5pt 0.0cm 1.0E-4pt 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience working in a regulatory compliance or project management-based environment.</li> </ul> Additional Information For many appointments within the CAA, these roles require access to operationally sensitive infrastructure and/or Nationally Protected information. For these roles the post holders must undergo National Security Vetting and achieve the appropriate level of clearance. SC - To be vetted we will usually expect a reasonable period of residency in the UK so that meaningful checks can be undertaken. For this role this will need to be 5 years. If you do not meet these requirements, we may not be able to accept your application. For more information on SC clearance please visit - <a href="https://www.gov.uk/government/publications/vetting-explained-and-our-vetting-charter/vetting-explained">Vetting explained - GOV.UK (www.gov.uk)</a> The CAA values high ethical standards and personal integrity among employees. If invited for interview you will be asked to complete a declaration of interest. <a name="_Hlk167098922"></a>Relocation & Property The CAA will be relocating from Aviation House (Our Gatwick Office) to new premises in a few years’ time. Our move is driven by strategic, operational and environmental considerations. We will be moving to a new local home, up to a 15-mile radius of Aviation House, to minimise disruption for our valued colleagues and customers. We are now working with colleagues and visitors to understand what we need in our new office, before we start our property search. We will sell Aviation House and land, vacate the site and move to new premises, but we do not expect to move before 2028 Inclusive Recruitment We are committed to building a diverse and inclusive workforce and welcome applications from all backgrounds. As a Disability Confident employer, candidates who meet the minimum requirements will be guaranteed an interview. Find out more about the <a href="https://www.gov.uk/government/collections/disability-confident-campaign">Disability Confident Scheme</a>. If you require any adjustments during the recruitment process, please let us know. Use of Artificial Intelligence by candidates in the CAA recruitment process We recognise that many of our candidates find Artificial Intelligence to be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be rejected on that basis. Working With Us Explore <a href="https://careers.caa.co.uk/content/Reward-and-Benefits/?locale=en_GB">What We Offer</a> section on our careers website to find out about our benefits and how we support work-life balance. Our Values Do The Right Thing, Never Stop Learning, Build Collaborative Relationships, Respect Everyone – For more information please <a href="https://careers.caa.co.uk/content/Company-Overview/?locale=en_GB">Click Here</a> We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. No recruitment agencies please.

Cyber Security Expert Advisor (Gatwick, GB) @ Civil Aviation Authority

About this role

Ready to apply?