Cyber Security Manager

On behalf of our private sector client, I'm on the lookout for a cyber security manager to help develop and deliver a cyber strategy.

Ideally, I'm looking for experience in a cybersecurity leadership role or a strategic cyber role, but strong experience across traditional security cloud security or Dev Sec Ops  with the genuine ambition to progress into a strategic leadership role would also be feasible.

The priority for this organisation is filling in any gaps in the current cyber security posture, to work with software delivery teams and enhance their security practices, and to implement cyber security best practice into their current cloud strategy (AWS predominantly, some Azure.)

This is an all-rounder role that touches on all areas of cyber security and will require a hands-on technical knowledge, but will also come with the opportunity to craft and own a cyber strategy, and to grow out the cyber team with specialists covering off priority cyber and infosec domains.

• Review, develop, monitor and mature the overall cyber security strategy
• Using your judgement, growing out the cyber team in line with the strategy and its key priorities
• Enhance and drive the cloud security strategy pertaining to AWS and Azure
• Working with colleagues across software development, infrastructure, networks, data analysis and cloud - advising on cyber best practices
• Working with managed service providers and third-party security providers
• Overseeing alerts pulling through from their MSSP, alongside putting effective measures in place to enhance organisational security following pentests.
• Understanding what good looks like in cyber, and articulating this effectively with stakeholders across the business
• Working with external consultants on GRC activities

• Experience in a cybersecurity leadership role or a strategic cyber role would be ideal, but strong experience across cloud security or Dev Sec Ops  with the genuine ambition to progress into a strategic leadership role would also be feasible
• Whilst this role won't have you creating use-cases, runbooks and playbooks, you will need a hands-on understanding of commonplace cyber tools in order to face off to MSSPs, external providers and internal technical and non-technical colleagues
• Cloud security knowledge - AWS is the priority, Azure would also be useful
• Ability to understand and properly react to pentest reports
• Ability to effectively communicate with technical and non-technical stakeholders up to board level
• A salary up to £75,000
• Flexible hours
• Heavily subsidised on-site gym
• 25 days annual leave with buy and sell, plus bank holidays