Security Manager

Job Type: Full-Time 40 hours per week, Monday to Friday.

At Airband, we’re building more than broadband networks, we’re helping reshape connectivity across the UK. Originally established to tackle the digital divide in rural and underserved communities, Airband has grown into a dynamic broadband provider delivering services through Fibre, Fixed Wireless Access (FWA) and wholesale network partnerships.

The Security Manager is responsible for leading and continuously enhancing Airband’s cyber and information security capability across all business and operational environments, including corporate systems, customer platforms and telecommunications network infrastructure.

This role will define and implement the organisation’s cyber security strategy, governance framework and operational security controls to ensure the confidentiality, integrity and availability of systems, services and data. The Security Manager will play a key role in protecting Airband’s FTTP and Fixed Wireless Access (FWA) networks from evolving cyber threats, ensuring operational resilience and regulatory compliance across both IT and service provider network environments.

The role requires a strong blend of strategic leadership, technical cyber security expertise, operational risk management and telecommunications network security knowledge. The Security Manager will work closely with Network Engineering, Systems, NOC, Infrastructure, Field Operations and third‑party security providers to ensure effective threat detection, incident response, vulnerability management and continuous security improvement.

• Cyber Security Strategy & Governance
• Define, implement, and maintain Airband’s cyber and information security strategy, policies, standards and governance framework.
• Develop and maintain a security roadmap aligned to business objectives, operational resilience and regulatory requirements.
• Ensure the confidentiality, integrity and availability of systems, data and network services across the organisation.
• Maintain ownership of the cyber security risk register, ensuring risks are identified, assessed, tracked and mitigated appropriately.
• Conduct regular security risk assessments, threat modelling and security posture reviews.
• Ensure compliance with relevant standards, frameworks and legislation including ISO 27001, NIST, GDPR and the UK Data Protection Act.
• Support internal and external audit activities relating to cyber security and operational compliance.

• Lead the security oversight of Airband’s FTTP, IP, transport and Fixed Wireless Access (FWA) network environments.
• Ensure appropriate network security controls are implemented across service provider infrastructure, including routing, switching, peering, transit and customer edge environments.
• Develop and maintain DDoS detection, mitigation and response capabilities to protect critical network services and customer connectivity and maintain working knowledge and operational application of service provider security principles including BCP
  38 anti‑spoofing controls and MANRS best practices.
• Collaborate with Network Engineering and NOC teams to improve visibility, threat detection, monitoring and operational response capabilities.
• Oversee vulnerability management and remediation activities across network, infrastructure and platform environments.
• Review and assess security implications of network changes, new technologies and infrastructure deployments.

• Manage third‑party security providers responsible for monitoring, detection, threat intelligence and incident response services.
• Lead security incident response activities, ensuring effective triage, containment, communication, recovery and post‑incident review.
• Establish and maintain security monitoring, alerting and escalation processes across both IT and network environments.
• Drive continuous improvement in detection capability, incident handling and operational security maturity.
• Ensure effective coordination between Security, NOC, Systems, Infrastructure and Engineering teams during cyber incidents or operational threats.
• Produce security…