Risk, Operations & Compliance Analyst

Summary

•    Based at Manchester Airport
•    Permanent
•    Flexible/Hybrid working for a better work/life balance.
•    We are proud to be a diverse employer, and we welcome candidates from all backgrounds.

Why MAG?

At MAG we provide the airport facilities and travel services that people need to connect with the world. As the largest UK owned airport operator, we serve over 60 million passengers a year from Manchester, London Stansted, and East Midlands Airports. With over 270 destinations across the globe, our businesses not only bring people together but also support the prosperity of the regions in which we operate. Sustainability is one of our core values, and it shapes everything we do. We're committed to protecting the environment and supporting our local communities. Our programmes include airport and airline decarbonisation, comprehensive education, skills and employment support and community engagement initiatives including volunteering opportunities. At MAG, we recognise creating a first-class journey for our customers starts by creating a first-class career journey for our colleagues and we are committed to building inclusive environments in which our people can thrive. You’ll also have access to some great benefits including:

•    Flexible and generous company pension plan with various company contribution options (up to 10%) that you can change to suit your personal needs.
•    24 days holiday plus bank holidays
•    Free parking / subsidised public transport
•    Huge range of company discounts
•    2 volunteering days per year
•    Free Virtual GP service, available 24 hours a day, 7 days a week
•    Care Concierge service. 

The role

You’ll be responsible for strengthening and maintaining the security and compliance posture of the organisation’s AWS environments by monitoring, and continuously enhancing controls aligned to recognised industry benchmarks (such as CIS, NIST, and the AWS Well‑Architected Framework). You’ll support the organisation’s PCI DSS obligations by ensuring cloud‑hosted services, architectures, and deployment patterns adhere to relevant PCI requirements and by guiding teams in maintaining secure configurations for in‑scope systems. In addition, you’ll also provide expert, practical security guidance to web and application development teams—enabling secure design, build, and operation of digital services while ensuring regulatory and internal security standards are consistently met.

What will make you successful in the role?

You’ll have previous experience gained in a regulated large organisation with a strong understanding of business applications and associated processes. You’ll have a Bachelor's degree in IT/IS or equivalent work experience and possess one or more of the following professional certifications/qualifications: CISSP, CCSP, CISM, CISA, PCIP, Security+. You’ll have a good knowledge and understanding of information risk concepts and principles as well as common information security management frameworks, such as NIST, PCI, ISO27001, Mitre and ITIL. You’ll also have knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, vulnerability management tools, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools, as well as a knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.