Cyber Security Lead

English Technology Cyber Security Lead Closing Date: 27 September 2026

Location:

Cambridge, UK Hybrid with 40-60% of time in the office

Contract:

Permanent

Hours:

Full time, 35 hours per week Ready to own cyber security for the technology behind English learning used by millions of people around the world? We are Cambridge University Press & Assessment, a world-leading academic publisher and assessment organisation and a proud part of the University of Cambridge. This is a rare chance to shape and own the cyber security agenda for English Learning Technology.

You will set the direction, organise and build the team. You will also grow as a leader, backed by our commitment to your development. Learn more about our Pursuing Potential employee value proposition. You will align to and support the Group Security strategy for the entire organisation. About the role As our Cyber Security Lead, you will provide the strategic, technical and governance leadership for cyber security across the English Learning Technology function.

You will set the direction, shape the priorities, and make sure security is built into how we plan, build and run our technology. You will report to the Deputy Director and work closely with our central security team, helping delivery their enterprise strategy. You will be the go-to authority on cyber risk. You will give senior leaders a clear, honest view of where we stand across our applications, platforms, suppliers and services.

And you will make sure risks and vulnerabilities are spotted, prioritised and dealt with. You will also lead and develop a small security operations team. In this role you will:
Set the cyber security strategy and priorities for the function, in step with our wider security approach. Be the expert voice on cyber risk, giving senior leaders clear advice and honest challenge. Keep an authoritative view of our security posture across applications, platforms, suppliers and services. Lead security governance and reporting, so decision-makers can see the risks, threats and progress that matter.

Shape technology, architecture and investment decisions, so security is built in from the start. Lead security assurance for major systems, projects and suppliers, and steer how we tackle vulnerabilities and incidents. Hold teams and suppliers to account for the controls and fixes they have committed to. Lead, coach and grow your security operations team. This is a hybrid role. You will typically spend 4060% of your time connecting face-to-face at your dedicated location.

We also welcome other flexible working requests from your first day, including adjustments you may need for a disability or long-term health condition. About You You are an experienced cyber security leader. You have worked at a senior level in a complex technology environment. You bring deep expertise in security strategy, governance, risk and assurance. You also have strong, hands-on knowledge of application, platform and cloud security, including AWS.

You are confident influencing senior stakeholders and offering honest challenge on cyber risk. You have a track record of setting security strategy and driving risks, vulnerabilities and incidents through to resolution. You know the key standards and frameworks, such as ISO 27001, NIST, Cyber Essentials and OWASP. And you have the people skills to build a strong team and work well across technology, legal, procurement and suppliers.

If that sounds like you, we would love to hear from you. You will stand out even more if you can also show: A recognised security certification, such as CISSP, CISM or CCSP. Hands-on experience with tools like AWS security services, Sonar Cloud and Tenable. Experience building secure-by-design and Dev Sec Ops  practices into the software development lifecycle. Experience working alongside a central security function.

Experience in a regulated, education or publishing environment. We are a Disability Confident (DC) employer that is committed to equality and inclusion ensuring our recruitment process is accessible to all. The DC scheme's Offer of an Interview commitment applies to applicants who opt in, and disclose a disability or a long-term health condition, and who best meet the minimum criteria for the role.

In instances where interviewing all qualifying candidates is not practicable and/or appropriate, we prioritise those who best meet the minimum criteria, as we would for applicants who do not have a disability or long-term health condition.…