IT Security Analyst (EASA Part-IS Lead)

Tewkesbury, Gloucestershire | Global Cybersecurity Function | Aerospace Sector

Are you an experienced cybersecurity professional looking to play a key role in protecting systems that support aviation safety?

At Moog Aircraft Group, we're seeking an IT Security Analyst to join our Tewkesbury site and act as the local EASA Part-IS Lead. Working as part of our global cybersecurity organisation, you'll be responsible for maintaining our Information Security Management System (ISMS), managing cyber risk, supporting compliance activities, and driving security best practices across the site.

This is a corporate-directed role within a global organisation, similar to other corporate functions, where you'll report into a global team while working closely with local leadership and functional teams in Tewkesbury.

What You'll Do

• Lead EASA Part-IS compliance activities for the Tewkesbury site.
• Operate and maintain the site's Information Security Management System (ISMS).
• Monitor security events, investigate incidents, and coordinate response activities.
• Conduct risk assessments, vulnerability reviews, and security audits.
• Act as the primary point of contact for EASA regulators and auditors.
• Coordinate cybersecurity risks that could impact aviation safety.
• Support the deployment and management of security technologies and controls.
• Partner with global cybersecurity teams to drive consistency and continuous improvement.

What We're Looking For

• Experience in cybersecurity, information security, governance, compliance, or risk management.
• Strong understanding of security operations, incident response, vulnerability management, and security best practices.
• Experience working within aerospace, manufacturing, defence, or other highly regulated environments.
• Knowledge of cybersecurity frameworks such as Cyber Essentials Plus, CMMC, NIST, ISO 27001, or similar.
• Experience with security technologies such as EDR/XDR, SIEM, Privileged Access Management, Vulnerability Management, Cloud Security, and Endpoint Protection.
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and non-technical teams.

Professional certifications such as Security+, CISSP, CISM, CEH, or equivalent would be advantageous.

Location & Travel

• Based in Tewkesbury, Gloucestershire
• Approximately 75% onsite presence required
• Occasional travel to Wolverhampton and Dublin

What We Offer

• Flexible benefits package and development opportunities to support career progression
• 33 days annual leave (including bank holidays)
• Private medical insurance, mental health support and financial advice
• Generous life assurance and company pension contribution (from 6%)
• Employee share options, free onsite parking, EV charging and gym facilities

If you're looking for an opportunity to combine cybersecurity, compliance, governance, and aviation safety within a global aerospace organisation, we'd love to hear from you.

Apply today and help us shape the future of aerospace security.