Cyber Security Manager

Description

Job title: Cyber Security Manager
Location: Halifax Elland HX5 9JP

Hours: 37.5 hours
Working Pattern:Full-time On-site 5 days per week (core hours flexible shifts weekend/evening if required).

Are you seeking a hands-on role where you will be responsible for security posture management security operations and supplier oversight risk and control governance and compliance and assurance while driving continuous improvement in security maturity data protection capability and the organisations overall security strategy.

We are seeking an experienced individual with several years experience ideally in a similar role to provide cyber and information security leadership across our established and mature technology estate spanning a complex cloud environment including but not limited to Azure and AWS.

What we are looking for:

• Assess the current security posture
• Set priorities based on risk
• Drive change across technical and procedural controls
• Influence internal teams and suppliers
• Provide assurance to leadership
• Demonstrates strong hands-on expertise across a mature Azure and AWS estate with a deep understanding of cloud architecture security and operational best practice.
• Act as the primary point of contact for cyber security across the A-SAFE Group providing leadership and support to both UK operations and global subsidiaries.
• Collaborate with infrastructure teams to ensure effective backup recovery and business continuity processes.
• Ensure all core business software and applications are secured through the various mediums such as Single Sign-On.
• Improve our efficiencies by utilising automation and AI-led security initiatives
• Work closely with digital teams to embed security into systems and delivery processes ensuring a joined-up approach to security posture across platforms rather than operating in silos
• Manage the Microsoft security estate including Conditional Access Privileged Identity Management Identity Protection and Defender for Cloud.
• Conduct and manage third-party and supplier security risk assessments ensuring risks are identified mitigated and monitored appropriately.
• Enhance and maintain cloud security capabilities across Azure and AWS ensuring best practice configurations and aligned controls.
• Provide out-of-hours support for critical security incidents or escalations acting as an escalation point when required.
• Regular scanning of all public-facing assets for exposed credentials and misconfigurations.
• Owning and maintaining a complete inventory of public-facing assets.
• Responsible for defining implementing and governing data sensitivity labelling policies across the organisation
• Extensive knowledge of regulatory compliance frameworks and Microsoft Purview
• Own and manage a dedicated cyber security budget ensuring our investment is aligned with risk and compliance.

• Strong technical expertise across cyber security domains including cloud (Azure/AWS) endpoint security identity and access management and network security
• Experience with security tooling and SIEM/SOC platforms vulnerability scanning and monitoring solutions
• Solid understanding of security frameworks and standards (e.g. Cyber Essentials ISO 27001) and how to apply them practically within a business
• Ability to design and implement security controls across complex multi-platform environments
• Excellent stakeholder management and communication skills with the ability to translate technical risk into business impact
• Vendor and supplier management capability including working with managed service providers SOC teams and external auditors
• Strong organisational and planning skills with the ability to manage competing priorities across operational and strategic objectives
• Hands-on experience managing security operations including incident response threat detection and remediation activities
• Focused on reducing real business risk not just theoretical or tool-driven outcomes
• Take ownership of security outcomes and drives continuous improvement across the estate
• Able to influence both technical and non-technical stakeholders at all levels
• Able to respond effectively to incidents escalations and changing priorities
• Understands the balance between security cost operational impact and business objectives

• A subsidised on-site gym available for all colleagues.
• Flexible start and finish times to fit around you and your lifestyle.
• Enhanced Maternity Paternity and NICU pay.
• 25 Days holiday plus bank holidays with the option to buy more
• Cycle to work scheme Specsavers vouchers long service rewards EAP