IntroductionTogether, we’re working to welcome millions more passengers, while ensuring aviation can continue to be a force for good by leading global efforts in sustainability. At Heathrow, you can be part of this – providing solutions that make every journey better for millions each year.

That means ensuring we meet the changing needs of the passengers, colleagues and partners who use our airport to work, travel, trade, shop, eat, explore and connect. Our Solutions team covers project management, process improvement, business change, technology, cyber defence, masterplanning, infrastructure and procurement.

It brings together people with the skills to deliver prestigious and often large-scale projects, from transforming terminals to making big reductions in our carbon emissions.

Every day will test your skills and give you the opportunity to make your mark. You might be working with the technology and data that power our city within a city, driving vital commercial agreements with everyone from retailers to airlines, or improving the unique infrastructure that includes everything from 200 buildings to 250 HV substations.

It’s a collaborative environment, where you can rely on the support of the experts around you as you take on projects you’ll both take pride in and feel passionate about.

Job Description

The Cyber Security Analyst, Vulnerability Management OT will report to the Cyber Security Manager, Vulnerability Management and is responsible for the identification, assessment, and remediation of security vulnerabilities across the organisation’s OT estate.

This role ensures that the enterprise maintains a strong security posture by proactively managing risks, aligning with regulatory requirements, and supporting business resilience.

Your role will involveData Management

Identify OT assets on the estate using the OT NEMS tooling. Review and initiate asset data exchanges and updates between the OT NEMS tool & the OT asset database.

Conduct Risk Assessments: Identify potential vulnerabilities in OT systems using the OT NEMS tooling, reviewing its outputs for dissemination and assess the risks of potential threats, in collaboration with OT Operations colleagues.

Vulnerability Management: Track measures to manage and mitigate vulnerabilities in OT systems, chairing forums.

Monitor Security Systems: Continuously monitor OT systems for any signs of security breaches or anomalies, using the organisation’s OT NEMS tooling.

Incident Response: Follow and manage incident response plans to address security breaches promptly. Review, triage & investigate OT network anomaly alerts, Conduct regular periodic reviews of alerts (false positives, low, medium and high severity).

Compliance: Support Compliance teams in providing evidence of the organisation’s current regulatory compliance positions on regulated and critical systems.

Reporting: Maintain OT NEMS tool updates and key metrics reporting for key stakeholders.

These Skills Are EssentialGood knowledge of vulnerability scanning tools (e.g., Tenable, Defender, Qualys, Rapid7).

Solid understanding of CVSS scoring, threat modelling, and risk prioritisation.

Ability to interpret technical findings and communicate them to stakeholders.

Knowledge of patch management processes and tools.

Analytical, organisational, and communication skills.

About Us

With 80 million passengers passing through our airport each year, it takes hundreds of systems, platforms and networks to keep our airport running smoothly, 24 hours a day, 365 days a year.

Join us, and you’ll thrive on the buzz of providing the technology, data, cyber and digital capabilities that run all the services you’d expect to see in a city – and more.  Tech at Heathrow isn’t typical – the scale and non-stop nature of our airport make it truly unique.

Our Data, Digital and Technology team are leading the way in innovations that will make our airport more efficient, resilient and competitive, in an increasingly digital marketplace, as well as keeping Heathrow safe and secure.

Every day will test your skills and give you the opportunity to make your mark. We’re constantly looking for new ways to help Heathrow transform and grow, responding to the changing needs of passengers, colleagues and partner businesses. It means the chance to work on a huge variety of inspiring projects and to develop in lots of exciting directions.

Our team covers technology, cyber defence, data and digital, offering one-of-a kind careers you won’t find anywhere else.