Job Description

We are working with a leading UK based business with a multi-site estate who are looking for an experienced Cyber Security Manager to join its technology function. Reporting to the Head of Information Security, you'll lead the organisation's day-to-day cyber defence and information security capability. You'll protect critical systems, customer data and business operations across a large and complex technology estate.

This is a genuine leadership role that stays hands-on. You'll manage a team of Information Security professionals and a group of security vendor partners. You'll drive improvements in incident response, cyber resilience, governance, risk management and security awareness. The role is highly visible, and you'll work closely with senior stakeholders to build security into projects, technology decisions and business change.

What you'll be doing

• Leading and developing the organisation's cyber defence and information security capability
• Managing, coaching and developing a team of Information Security professionals
• Managing security vendor partners and making sure they deliver
• Owning and improving security incident response, including communications and recovery
• Leading security investigations and overseeing remediation after incidents or identified risks
• Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS
• Managing security audits, risk assessments and improvement plans
• Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums
• Working with technology and business teams to build security into projects, change initiatives and supplier engagements
• Promoting a strong security culture through awareness, education and engagement
• Keeping ahead of emerging threats and vulnerabilities to keep improving security maturity

• Proven experience leading a Cyber Security, Cyber Defence or Information Security function in a complex organisation
• Strong knowledge of security operations, incident response, risk management and security governance
• Experience developing and implementing security policies, controls and improvement programmes
• A strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practice
• Excellent stakeholder management and communication skills, and the ability to influence at all levels
• Experience leading teams and driving positive change across technology and business functions
• A pragmatic, commercial approach that balances security requirements with business goals
• The ability to juggle several priorities and make informed, risk-based decisions
• A hands-on mindset and a real passion for cyber security

• Base salary up to £85,000
• Annual bonus of up to 30%
• Matched pension contributions (up to 1.5x your contribution)
• Private healthcare and dental plan
• 26 days' annual leave plus bank holidays, with the option to buy up to two extra weeks
• Generous staff discounts across a large portfolio of venues
• Cycle to Work and wellbeing schemes
• Hybrid and flexible working