The UK aviation sector sits at the intersection of national infrastructure, global mobility, and rapidly evolving cyber risk. The security leaders shaping this space are protecting airlines, airports, and regulators and setting the benchmarks that startups and scale-ups must meet as they build technology for one of the world’s most complex industries. The individuals on this list are either currently serving as CISOs in the UK aviation ecosystem or closely tied to emerging cybersecurity leadership roles that influence how security is designed, governed, and operationalized across the sector.
Will Harvey — Head of Cybersecurity (CISO), IAG Transform
With nearly two decades spanning cyber security and national security, Will Harvey brings a rare blend of policy, operational, and compliance expertise to International Airlines Group. His career includes leading major reforms to UK security governance and assurance, with hands-on delivery across cloud platforms, digital services, and high-stakes national events. At IAG Transform, Harvey operates at the scale and complexity that defines modern aviation, making him a critical figure in shaping how cybersecurity is embedded into airline transformation efforts.
Peter Williams — Chief Information Security Officer, Manchester Airport Group
A veteran security and risk professional, Peter Williams has spent over 40 years building and leading security programs across the UK and Europe. As CISO of Manchester Airport Group, he is responsible for establishing and maintaining a group-wide information security management program that protects some of the UK’s most critical transport infrastructure. His background in risk assessment, crisis management, and business continuity positions him as a steady, pragmatic voice in an industry where resilience is non-negotiable.
Nicole Keeley — Director of Cyber (CISO), British Airways
Nicole Keeley is a seasoned cybersecurity leader with deep roots in the aviation industry. At British Airways, she oversees cyber strategy in an environment where operational reliability and customer trust are paramount. Known for her strengths in technical solution design, leadership, and communication, Keeley exemplifies a modern CISO profile, one that balances engineering rigor with stakeholder engagement and customer experience in a highly regulated, globally visible organization.
Peter Drissell — Director of Aviation Security, UK Civil Aviation Authority
Peter Drissell plays a uniquely influential role in UK aviation security. As Director of Aviation Security at the Civil Aviation Authority, he sits on the executive committee and leads regulation and compliance across airports, airlines, cargo handlers, and in-flight suppliers. Since 2019, his remit has included cyber security oversight for UK civil aviation, giving him a pivotal role in shaping how cybersecurity expectations are defined and enforced across the industry. While not a startup CISO, his impact on the ecosystem is profound, setting the regulatory framework within which innovation must operate.
Paul Midian — Chief Information Security Officer, easyJet
With more than 25 years of experience in information and cyber security, Paul Midian brings enterprise-grade discipline to one of the UK’s most recognizable airlines. Before joining easyJet, he served as CISO at Dixons Carphone and held senior roles at PwC, leading large-scale cyber transformation programs. At easyJet, Midian is responsible for securing a fast-moving, digital-first airline, a challenge that closely mirrors the pressures faced by aviation technology scale-ups.
Tony Johnson — Head of Cyber Security Operations, MAG (Airports Group)
Tony Johnson represents the operational backbone of aviation cybersecurity. As Head of Cyber Security Operations at MAG, he stood up and now runs an in-house Security Operations Centre, managing both operational and capital budgets. His work underscores the growing importance of internal cyber capability in aviation environments, where real-time threat detection and response are critical. Johnson’s role highlights how emerging security leadership is increasingly defined by execution, not just strategy.
Where Aviation Cyber Leadership Is Headed Next
What unites these leaders is not just their titles, but their proximity to the systems that keep aviation moving, safely, securely, and at scale. As UK aviation continues to modernize, the influence of these CISOs and security heads will extend well beyond airlines and airports, shaping how startups, scale-ups, and technology partners approach security by design. In an industry where trust is infrastructure, these are the leaders setting the pace.