Sr. Analyst, Cybersecurity Risk Management

Overview

Join Our Team at Wheels Up

At Wheels Up, we're proud to be a global leader in on-demand private aviation. As one of the largest companies in the industry and a strategic partner of Delta Air Lines – we are committed to making private air travel safe, reliable, and enjoyable. With a diverse fleet of owned aircraft plus a global network of trusted charter operators, we offer our customers access to the right aircraft for their needs and the ability to fly on their terms.

 

And it doesn’t stop at private flights. Wheels Up also provides freight services, safety and security solutions, and managed services to individuals, businesses, government agencies, and more. Regardless of how, when or where you want to fly, our mission is simple; deliver a premium, personalized aviation experience for every customer.

We anticipate closing applications submissions for this role on 5/23/25. If the deadline is extended, we will update this job posting accordingly.

 

Role Overview: What You’ll Be Doing

The Sr Analyst, Cybersecurity Risk Management will perform key Cybersecurity Governance, Risk and Compliance (GRC) functions within the Cybersecurity department.  Working collaboratively and across departments, the Sr Analyst will support and execute across Cybersecurity domains of Regulatory Compliance, Risk Management, Data Security and Privacy, Policy and Procedures, and Third-Party Risk Management, all the while promoting leading cybersecurity practices across Wheels Up, Air Partner and subsidiaries.

 

The scope of this position is global in nature and will work collaboratively across Wheels Up, Air Partner and subsidiaries to facilitate cybersecurity risk prioritization.

Responsibilities

Your Key Responsibilities (Essential Functions)

 

Cybersecurity Risk Governance and Strategy

• Participate and execute governance activities including metrics gathering and reporting, and the performance of recurring internal assessment activities.
• Support the development, implementation, and maintenance of reports and metrics to evaluate the performance of the Cybersecurity Risk Management program.
• Assist with technical writing for policies, standards, and communications. Support creation and maintenance of cybersecurity policies, standards, processes guidelines and support documentation.
• Support the administration of corporate-wide cybersecurity awareness training, distribution of security bulletins, alerts, updates, and other security related information.

Cybersecurity Risk Management Operations

• Respond to and maintain the GRC service queue for tickets escalated to the team in coordination with the relevant stakeholders and manage the cybersecurity risk register
• Support activities pertaining to risk management; execution of identification, tracking, and participation within treatment activities.
• Support efforts to verify, analyze, and monitor key performance, risk, and control indicators to support management and board-level reporting across business units.
• Stay current and informed on regulatory concerns and changing IT and information security trends impacting the Aviation Industry.
• Participate in Cybersecurity Incident Management/Response, disaster recovery and business continuity planning.
• Responsible for staying up to date and informed on regulatory concerns and changing IT and information security trends.

 

Cybersecurity Compliance and Risk Assessments

• Perform and support third-party due-diligence process and assist to identify, document, and recommend ongoing monitoring strategies for Third parties and Fourth parties providing services to Wheels Up and Air Partner.
• Respond to cybersecurity assessments, questionnaires, and audits from Wheels Up and Air Partner corporate/individual members and third-party business partners to communicate Wheels Up Cybersecurity Controls and data security practices.
• Support internal and external audit process for relevant compliance to SoX controls and GDPR.

Other duties as assigned as this role requires agility and adaptation to changing business requirements.

Qualifications

What You Bring to the Table: Education & Certification Requirements

We’re looking for someone who has a unique mix of experience, skills, and passion for what we do:

• Bachelor’s degree in technology-related field related
• Master’s degree is a plus.
• Minimum 5+ years' experience in Cybersecurity Governance, Risk and Compliance functions
• Active certification as a Certified Information Security Professional (CISSP) is preferred
• Experience with leading r