Cyber Security Manager

Kiosk mode

Before you apply, check out our handy hints and tips.

• London

• Technology

• Permanent

This role offers a competitive salary, hybrid working (London with 2 days in the office, Thursdays mandatory), 28 days holiday a year plus Bank Holidays and a fantastic pension scheme offering 6% in year one and 11% after this.

Salary £73,000 - £80,000 per annum

Location:
London/Hybrid (2 days in the office, Thursdays mandatory)

Please note:
Although we acknowledge that the use of AI tools can be helpful, we want your application to represent you. Please ensure your CV and statement of suitability (if asked to send in this advert) reflect your own voice and experiences.

Are you a technical security expert who thrives at the intersection of strategy and hands‑on execution? We are looking for a Cyber Security Manager to lead our operational technical security domain. You will be the go‑to authority for infrastructure and cloud security, managing a focused team and partnering with the wider business to ensure our digital ecosystem remains resilient against emerging threats.

In this role, you won't just be monitoring dashboards; you will be shaping our security strategy, driving vulnerability management, and embedding a "security by design" culture across our product development life cycle.

This is a pivotal role where you will have direct influence over our security posture. You'll report directly to the Head of Information Security & Technology Risk, giving you a high‑visibility platform to drive change.

• Technical Leadership:
  Manage and mentor a small technical security team (currently 1 direct report), overseeing all technical aspects of security from Infrastructure to Dev Sec Ops .
• Cloud & Infrastructure Custodian:
  Lead security initiatives across Azure, AWS, Google Workspace, Microsoft, and Salesforce. You will ensure our cloud environments and architecture meet the highest standards.
• Run a strategic vulnerability management program to enhance internal IT.
• Vulnerability Management:
  Serve as the primary point of contact for penetration testing, vulnerability and patch management. You'll coordinate with technical teams to ensure vulnerabilities are identified, negotiated, and remediated swiftly.
• Strategic Partnership:
  Work hand‑in‑hand with our Managed Service Provider (MSP) for 24/7 monitoring, incident response, and threat resolution.
• Capability maturity:
  Conduct gap analysis of current and future tooling to define improvements in tooling.
• Tool Ownership:
  Act as the internal expert and administrator on security tooling.
• Product Security:
  Provide security advice and guidance to development and engineering teams to ensure secure product development.
• Act as security champion for Which? infrastructure.

• Expertise:
  Strong technical knowledge of AWS, Microsoft 365, Azure, Microsoft defender, Tenable One and Salesforce (or a strong willingness to master the latter).
• Certifications:
  
  CISM, CISSP, or equivalent professional qualifications.
• Strategic Mindset:
  Proven experience in security strategy, incident management, and infrastructure security, vulnerability management and endpoint security.
• Communication:
  The ability to translate complex technical risks into "plain English" for non‑technical stakeholders. You are friendly, approachable, and a natural collaborator.
• Drive:
  You are a self‑starter who can manage your own workload and lead from the front to build and develop your team to accomplish security capabilities. We work hard and play hard.

• Practical experience with PCI DSS compliance.
• Background in Data Protection/Management.

• 30‑minute screening call with members of the Security Team via MS Teams.
• 60-90 minute…