Description
zero trust
insider risk
iam governance
threat detection
incident response
audit readiness
The Cyber Security Manager – Cyber Risk will lead the cyber‑security strategy, governance and execution across Insider Risk Management, Identity and Access Management, audits, compliance and quality assurance. The senior role is responsible for building a robust security posture, managing a high‑performing specialist team, embedding Zero‑Trust principles and driving continuous improvement while influencing strategic decisions and fostering a security‑first culture throughout the organisation.
- Execute cyber risk management strategy aligned with objectives and regulations
- Lead and develop a team of cyber security specialists, fostering accountability and innovation
- Champion Zero Trust principles across security initiatives
- Oversee insider risk programs using Microsoft Purview, ServiceNow, Tenable One, Zscaler
- Drive proactive threat detection through advanced analytics and reporting
- Govern IAM frameworks, enforce least‑privilege access and strong authentication
- Own the cyber risk register and integrate it with enterprise risk frameworks
- Lead audit readiness for Cyber Essentials, ISO certifications and regulatory requirements
- Direct incident response activities, ensuring rapid containment and root‑cause analysis
- Serve as primary cyber liaison for senior leaders and cross‑functional teams
- Provide clear, actionable security insights and recommendations to leadership
- Reduce organisational cyber risk posture and achieve audit success with minimal findings
- Meet SLA targets for incident containment, resolution and policy compliance
- Foster team development with positive engagement scores and professional growth
- Participation in employee networks supporting LGBTQ+, gender, ethnicity, disability and parent/carer communities
Requirements
leadership
iam
zero trust
cissp
dlp
security analytics
Success in the role will be measured by risk reduction, audit outcomes, incident‑response service‑level compliance, policy adherence and team development. The manager must demonstrate strategic thinking, decisive leadership under pressure, excellent communication for both technical and non‑technical audiences, and a proactive, innovative approach to security.
Essential qualifications include proven leadership experience in cyber security and governance, strong knowledge of IAM, insider risk and Zero‑Trust, and outstanding stakeholder‑management and communication skills. Desirable attributes are professional certifications such as CISSP or CISM, experience with DLP and security analytics platforms, and familiarity with regulatory frameworks. The offer is conditional on obtaining the required security clearance.
- Demonstrate strategic thinking, decisive decision‑making under pressure, and excellent communication
- Proven leadership experience in cyber security governance (essential)
- Strong knowledge of IAM, insider risk and Zero Trust (essential)
- CISSP, CISM or equivalent certification (desirable)
- Experience with DLP technologies, security analytics platforms and governance dashboards (desirable)
Benefits
Employees enjoy a comprehensive benefits package covering health and wellbeing, financial security, generous holiday entitlement, enhanced family and caring leave, and extensive learning and development opportunities, as well as access to employee networks and community‑impact programmes.
- Private medical insurance and health cash plan
- Access to wellbeing programmes including Peppy menopause support
- Pension contributions matched between 4.5% and 7% and life assurance up to 4× salary
- Flexible benefits such as critical illness insurance and payroll saving schemes
- 33–35 days holiday (increasing to 35 days after 5 years) with buy/sell options
- Enhanced family leave: 26 weeks paid maternity/adoption, 2 weeks paternity, shared parental leave up to 24 weeks full pay
- Additional caring leave days with paid options
- Primary professional institution subscription and a range of training, mentoring and self‑development opportunities
- Opportunities to engage in social outcome projects within local communities
Training + Development
Information not given or found