Associate Director Cyber Security

Associate Director of Cyber Security – IT Operations

5 Days a week onsite

We’re looking for an experienced Associate Director of Cyber Security to lead the cyber strategy and day‑to‑day security operations. This is a hands‑on leadership role, responsible for strengthening security posture across on‑prem, Azure, and AWS environments, using Cisco security stack to protect people and digital assets from modern threats.

• Lead and evolve cyber security strategy, roadmap, and policies.
• Design and implement layered security architecture across cloud and on‑prem.
• Own SIEM and SOAR platforms, including use cases, automation, tuning, and onboarding.
• Drive vulnerability management, penetration testing, and remediation activities.
• Integrate threat intelligence and proactively strengthen detection capabilities.
• Oversee Windows/Linux hardening and security standards (CIS, ISO 27001, NIST, GDPR, Cyber Essentials).
• Support security architecture across global IT infrastructure.
• Manage external SOC provider and internal cyber engineer.
• Lead incident response, investigations, and on‑call rotation when required.
• Deliver security awareness training, phishing simulation campaigns, and reporting.
• Act as a trusted advisor to the business, communicating risk clearly and effectively.

• Degree in Cyber Security, Information Security, Computer Science, or related field.
• 4+ years in a senior cyber security role leading operations, strategy, or incident response.
• Certifications such as CISSP, CISM, CISA, or CCNP Security.
• Strong experience with SIEM, SOAR, EDR, vulnerability management, and multi‑cloud (Azure/AWS).
• Deep understanding of security frameworks and compliance standards.
• Hands‑on experience with security hardening for Windows and Linux.
• Proven ability to manage SOC providers and mentor security staff.
• Excellent communication skills, able to translate complex risk to non‑technical stakeholders.

• Experience in Life Sciences or Pharmaceutical environments (GxP).
• Knowledge of cloud architecture, containerisation, automation, and hybrid infrastructure.