Cyber Threat Intelligence Manager

Requirements

• Proven background in cyber threat intelligence, encompassing threat actor analysis, campaign tracking, and intelligence reporting, with a strong technical focus on data and tools. (5+ years experience)
• Strong understanding of CTI tooling and platforms, with experience upgrading tooling, boosting integration, and growing the operational value of threat intelligence systems
• A formal intelligence qualification or equivalent professional training (for example military, government, law enforcement, or recognised commercial intelligence programmes), or demonstrable use of detailed intelligence methodologies
• Demonstrated people management experience, including line management, performance development, and capability building
• The ability to transform intricate cyber threat data into clear, practical insights for both technical and non-technical audiences
• We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply

• Lloyds Banking Group’s Threat Lab is transforming the delivery of cyber threat intelligence. It provides timely, actionable insight that helps the organisation move quickly and safely. By combining deep technical knowledge with modern data-driven intelligence methods, the Threat Lab takes on a meaningful role in boosting the Group’s cyber resilience. It also supports security decisions across a large and complex enterprise that operates with national and systemic significance
• To fulfil this ambition, the Cyber Threat Intelligence (CTI) team seeks an experienced senior analyst with technical expertise to develop and improve the Group’s CTI capability. The role suits a candidate who combines strong intelligence tradecraft with a hands‑on, data‑focused method for tools, platforms, and analysis to convert complex threat data into actionable insights that lead to tangible operational outcomes
• Taking a lead role in transforming how threat data is gathered, enriched, analysed, and put into practice across the Group. This includes boosting the efficiency of CTI tooling, deepening the use of structured analytic techniques, and delivering clear technical and people leadership to the team. Contributions will directly aid in strengthening defensive outcomes, raising trust in intelligence outputs, and ensuring threat intelligence is reliable, timely, and geared towards decisions
• The role includes line management responsibilities. It offers significant scope to influence how intelligence products are produced, consumed, and embedded across Lloyds Banking Group, crafting the future of our cyber defence capability
• In this role you’ll assume line management responsibilities and will take a lead role in transforming how threat data is gathered, enriched, analysed, and put into practice across the Group