Cyber Security Manager

Overview

Company Profile
Total IT is an award-winning technology services and systems integration business founded in 2006, with offices in Bedford, London, and Dubai. We operate at the intersection of IT, cyber security, networks, and smart building technology, supporting some of the largest and most complex commercial buildings in the United Kingdom, alongside a growing portfolio of international clients. With sustained growth, an exceptional client portfolio, and a people-first culture, we combine technical excellence with a commitment to outstanding customer experience.

As we evolve our security posture internally and for clients, this role is critical for shaping and delivering a mature, modern cyber practice.

Description

As Cyber Security Manager, you will own the delivery of cyber security across Total IT not just the strategy, but the execution. You will take full accountability for client security roadmaps, incident response, technical controls, and the day-to-day running of our cyber capability. This role blends hands-on technical leadership with operational delivery. You’ll be the driving force behind improving security for clients, maturing our internal processes, and ensuring that risks are understood, prioritised, and actioned.

You will be a trusted advisor to clients, a partner to our Operations and Technical teams, and the person who ensures this gets done.

• Own client cyber security roadmaps: creation, prioritisation, scheduled review, and delivery.
• Lead and continually improve our incident response function including triage, containment, communications, and lessons learned.
• Drive remediation by working closely with Service Desk, Projects, and clients.
• Maintain robust security reporting and ensure clients understand their risk position.
• Oversee compliance efforts (ISO 27001, NIST, GDPR) and ensure gaps are addressed.
• Provide guidance on governance, policies, and technical best practice.
• Ensure SOC activities are efficient, actioned, and measurable.
• Act as the escalation point for all complex cyber queries internally.
• Work with leadership to shape the long-term vision of our cyber offering.

• Build, update, and deliver client cyber security roadmaps ensuring agreed actions are completed, not just documented.
• Run regular risk and vulnerability reviews, prioritising remediation and driving work into the Service Desk /Projects teams.
• Lead incident handling end-to-end: triage, investigation, containment, communication, documentation, and lessons learned.
• Monitor and improve Microsoft 365 security posture across clients (Identity, Defender, Conditional Access, Purview, Secure Score).
• Manage SOC output and ensure alerts are assessed, escalated, and addressed.
• Own patching, vulnerability reporting, and remediation follow-through.
• Conduct technical control checks (email security, endpoint protection, MFA/SSPR, logging, backups, etc.).
• Attend client and internal security meetings, clearly communicating risks, progress, and next steps.
• Maintain our security documentation, processes, and SLAs.
• Assist engineers during major incidents or escalations.
• Lead post-incident reviews and convert them into long-term improvements.
• Build practical, usable processes and playbooks that work in a fast-moving MSP environment.
• Proactively identify areas where Total IT can improve our security resilience and service quality.
• Support presales for security-related work and advise on solution design.

• Configure and optimise security settings in Microsoft 365 & Azure AD.
• Validate SOC alerts, perform investigations, and drive containment actions.
• Analyse vulnerabilities, confirm exploitability, and ensure fixes are deployed.
• Review firewall rules, email security controls, and endpoint configurations.

• Proven experience in a security leadership or senior security operations role ideally within an MSP or high-variability environment.
• Demonstrable success delivering real-world security improvements, not just writing policies.
• Strong background in incident response and security operations.
• Ability to design, articulate, and deliver actionable security…