Cyber Security Analyst - Identity and Access Management

Join Heathrow’s Cyber Security team and play a critical role in safeguarding the digital identity of thousands of colleagues and partners. As the UK’s busiest airport, our operations depend on secure and reliable access to systems and data. This role ensures that every identity is protected, every access request is validated, and every risk is managed effectively.

You’ll be part of a collaborative team dedicated to defending Heathrow against evolving cyber threats. Success in this role means maintaining robust identity and access controls, preventing unauthorised access, and supporting the business to operate securely and efficiently. Your work will directly contribute to keeping Heathrow safe, resilient, and ready for the future.

• Monitor and manage identity and access management (IAM) systems to ensure compliance with security policies and standards.
• Act as the technical escalation point for identity-related incidents, troubleshooting complex access issues and implementing effective resolutions.
• Conduct regular reviews of user access rights, identifying and mitigating risks associated with excessive or inappropriate permissions.
• Support the implementation of multi-factor authentication, privileged access management, and other identity security controls.
• Collaborate with IT and business teams to ensure secure onboarding, role changes, and offboarding processes.
• Contribute to continuous improvement initiatives, enhancing identity governance and reducing operational risk.
• Proven experience in identity and access management within a complex IT environment.
• Strong understanding of authentication protocols, directory services, and access control models.
• Ability to investigate and resolve technical identity-related issues under pressure.
• Knowledge of security frameworks and compliance requirements relevant to IAM.
• Excellent communication skills to work effectively with technical and non-technical stakeholders.
• Ability to deliver identity risk assessments and recommend practical remediation measures.

Ideally you'll have the following

• Familiarity with tools such as Azure AD, SailPoint, or similar IAM platforms.
• Experience implementing privileged access management solutions.
• Understanding of cloud security principles and their application to identity management.