National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Chief Information Security Officer

IAG Loyalty
London
1 day ago
Create job alert

Who we are ????
We’re the people behind global loyalty currency, Avios, and home to two ambitious, growing businesses across Loyalty and Holidays. Each business has its own goals, strategy and team, but collectively we share a purpose to create the world’s most rewarding experiences for our customers through loyalty programmes, new products and holidays. Get the full IAG Loyalty lowdown, here.
We’re on a truly exciting journey of growth and transformation – we’re going places! It means we have a fantastic story to tell our people and the rest of the world. This is where you come in.
The opportunity
We have a brand new opportunity for an experienced Chief Information Security Officer (CISO) to lead the information and cyber security strategy across IAG Loyalty companies, which include Loyalty (the Avios currency) and British Airways Holidays.
Reporting to the Chief Technology, Data & AI Officer you'll establish a unified security vision and governance framework, while tailoring risk-based solutions to the unique needs of each company.
You'll be the principal advisor to the executive team and board on cybersecurity matters affecting our businesses, but you'll also play a key role across the wider IAG group of companies to develop and implement an aligned federated security governance model.
Your leadership role goes beyond security; you'll also be a key stakeholder and peer within our broader Senior Leadership Community, helping to drive business growth and manage change
To be successful in this role you'll need to be a leader who can operate at both strategic and operational levels across diverse business environments.
What you’ll get up to
Standardise information security policies, frameworks, and controls across all entities, while allowing flexibility for business specific regulations.

Oversee Cyber security regulatory compliance initiatives ns (e.g. NIST, ISO 27001, SOC2 compliance).

Lead the design and operation of shared security services between IAG Loyalty and IAG airlines (e.g., threat detection, incident response, intel management, data sharing) at the group level.

Establish clear escalation protocols and cross-company incident response procedures.

Align security initiatives with individual business unit goals while maintaining IAG Loyalty wide consistency and efficiency.

Present risk reports, maturity assessments, and board-level dashboards to group leadership.

Drive adoption of advanced security technologies, automation, and intelligence-sharing across the group.

Evaluate and manage third-party security risks, including vendors and strategic partners.

Prepare our security landscape for an AI driven future

What we need from you
You'll have considerable progressive security experience, including a number of years in a senior leadership role of cyber functions in scale-up or high-growth environments , where you’ve had to be hands-on, commercial, and adaptable

You have a proven track record of establishing and scaling company-wide security programs

You'll have a strong understanding of risk management, compliance frameworks, cloud security, and modern enterprise architecture in an agile working practices environment.

You'll have recognised security certifications: CISSP, CISM, CISA, CRISC, or similar.

You'll possess a strategic growth mindset balanced with a security first approach

We might not be right for you if:
You only want to focus on your to-do list; we’re a small, high-performing team, we help each other to succeed.

You value perfection over fast iteration and progress; IAG Loyalty moves fast, we learn and iterate as we go; our environment isn’t right for everyone.

You’re looking to create but not build; this is an end-to-end role, you need to be comfortable owning your space, from ideation through to delivery and review.

Equity, Diversity and Inclusion at IAG Loyalty
Our vision, 'to create the world's most rewarding experiences,' applies not only to our customers but for our colleagues too. It's about taking belonging seriously, actively fostering a culture where everyone feels welcomed and valued by embracing diverse identities, personal histories, and perspectives.
This commitment makes IAG Loyalty a rewarding place to work and enhances our ability to solve complex problems, drive innovation, and better serve our customers and communities.
Please let us know if we can make any reasonable adjustments to support your interview process with us.

#J-18808-Ljbffr

Related Jobs

View all jobs

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer (CISO)

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Present Cyber Security Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

Cyber security is no longer just an IT issue—it’s a board-level priority. Whether you’re applying for a role in penetration testing, security operations, risk management, or compliance, your ability to clearly explain cyber threats and solutions to non-technical stakeholders is vital. This guide will help cyber security job seekers develop one of the most in-demand soft skills in the industry: public speaking. You’ll learn how to simplify complex concepts, structure effective presentations, use storytelling and analogies, and handle common stakeholder questions with confidence.

Cyber Security Jobs Employer Hotlist 2025: 50 UK Companies Actively Hiring Right Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their cyber security teams. Ransomware payouts broke records in 2024, the UK’s new Cyber Security Bill imposed mandatory breach disclosure, and the National Cyber Force’s move to Samlesbury has super‑charged the northern skills market. Result? Demand for security architects, SOC analysts, penetration testers, cloud‑security engineers, threat hunters & GRC specialists is at an all‑time high in 2025. Below you’ll find 50 organisations that have posted UK‑based cyber security vacancies or announced head‑count growth during the past eight weeks. They’re organised into five quick‑scan categories. For every employer you’ll see: Main UK hub Example live or recent vacancy Why it’s worth a look (tech stack, culture, mission) Search any company on CyberSecurityJobs.tech to view current ads, or set a free alert so fresh openings land straight in your inbox.

Return-to-Work Pathways: Relaunch Your Cyber Security Career with Returnships, Flexible & Hybrid Roles

Re-entering the workforce after a career break can feel especially challenging in a fast-moving field like cyber security. Whether you stepped away for parenting, caregiving or another life chapter, the UK’s cyber security sector now offers a range of return-to-work pathways—from structured returnships to flexible and hybrid roles. These programmes value the transferable skills and resilience you’ve developed during your break, pairing you with mentorship, upskilling opportunities and supportive networks to ease your transition back into cyber security. In this article, tailored for parents and carers, you’ll discover how to: Understand the growing demand for cyber security talent in the UK Translate your organisational, communication and problem-solving skills into cyber security roles Tackle common re-entry challenges with practical solutions Refresh your technical knowledge through targeted learning Access returnship and re-entry programmes specific to cyber security Find roles that accommodate family commitments—whether hybrid, flexible or full-time Balance your career relaunch with caring responsibilities Master applications, interviews and networking in cyber security Draw inspiration from real returner success stories Whether you aim to return as an analyst, penetration tester, security engineer or compliance specialist, this guide will equip you with the steps and resources to reignite your cyber security career.