We are seeking an experienced Senior Cyber Security Manager to oversee the development and implementation of cybersecurity policies, standards and controls across the organisation.

The successful candidate will have a strong background in information security management, enterprise risk, security governance and technical security operations. They will be responsible for assessing security risks, improving the organisation's security posture and ensuring that appropriate controls are implemented and maintained.

The role requires an individual who can work effectively with senior management, technology teams and business stakeholders to manage cybersecurity risks and support the organisation's regulatory and operational requirements.

Key Responsibilities

Develop, implement and maintain the organisation's cybersecurity strategy, policies and standards.
Manage information security risks, ensuring that appropriate mitigation plans and controls are in place.
Oversee security governance, risk assessments, compliance activities and internal and external audits.
Monitor the effectiveness of security controls and coordinate remediation activities where deficiencies are identified.
Provide oversight of security operations, including vulnerability management, threat monitoring, incident response and security investigations.
Lead the organisation's response to significant cybersecurity incidents, coordinating escalation, recovery and post-incident reviews.
Work with IT, infrastructure, cloud and application teams to ensure security requirements are incorporated into technology projects and changes.
Maintain and improve security frameworks and control environments in line with recognised industry standards.
Manage third-party security assessments and oversee the identification and treatment of supplier-related risks.
Prepare security reports and risk updates for senior management, providing clear information on key risks, control effectiveness and recommended actions.
Support business continuity and disaster recovery arrangements, including cyber incident response exercises and resilience testing.
Manage security improvement initiatives, ensuring that agreed actions are delivered within established timeframes.

Essential Requirements

CISSP certification is required.
Significant experience in information security or cybersecurity, including experience in a senior management or leadership position.
Demonstrable experience managing cybersecurity risks, security controls and information security programmes within a complex organisation.
Strong knowledge of information security governance, risk management and regulatory compliance.
Experience working with recognised security frameworks and standards, such as ISO 27001 and the NIST Cybersecurity Framework.
Experience overseeing vulnerability management, security incident response, security assessments and remediation programmes.
Ability to engage with senior stakeholders and communicate security risks and recommendations clearly.
Experience managing security projects, competing priorities and cross-functional teams.
Strong analytical, organisational and decision-making skills.

Desirable Requirements

Additional relevant qualifications, such as CISM, CRISC, CISA or CCSP.
Experience implementing or maintaining an ISO 27001 Information Security Management System.
Knowledge of relevant regulatory requirements, including GDPR, NIS2 or DORA, where applicable.
Experience with cloud security, identity and access management, security monitoring and security operations.
Experience managing external security providers, consultants and technology suppliers.
Experience developing security metrics, management reporting and risk treatment plans.

Personal Attributes

The successful candidate will demonstrate sound judgement, attention to detail and a structured approach to managing security risks. They will be able to work independently, exercise appropriate professional challenge and build effective working relationships across technical and business functions.

They should also be comfortable managing sensitive issues, prioritising competing demands and providing clear, evidence-based recommendations to senior management.

Application Process

Candidates should submit an up-to-date CV outlining their relevant cybersecurity management experience, professional qualifications and key areas of responsibility.

Applications will be assessed against the essential requirements and the experience outlined above.

[Company Name] is an equal opportunities employer.

‌

‌‌

‌

‌‌‌

‌

‌
‌
‌

‌
‌
‌

‌
‌
‌
‌
‌

‌
‌
‌