Operational Security Team Lead

Location: Bradfield

Position Summary We are seeking an Operational Security Team Lead to establish and lead a new team managing day-to-day security and resilience of systems within a large, highly regulated Critical National Infrastructure organisation. This role focuses on ensuring core operational security controls are consistently applied, including patching, vulnerability management, adherence to security standards and policies, and governance of privileged user access.

You will oversee vulnerability assessments, drive remediation efforts, and act as the primary liaison between IT operations and the Cyber Team, covering both on-premise and cloud infrastructure. Must hold or commit to achieving DV clearance within 12 months of appointment. What you'll do Implement and manage robust security protocols and procedures, identifying potential threats and vulnerabilities across operational processes Oversee regular vulnerability assessments, ensuring rapid response and ongoing improvement of penetration testing plans and methodologies Ensure clear understanding within the team of the criticality of information and technology resources to enable effective prioritisation of monitoring and remediation Act as the primary liaison for security-related matters, maintaining strong communication with the Cyber Team Collaborate closely with IT and Cyber teams to strengthen security posture, support incident response, and contribute to security policy development (including certificate and encryption key management governance) Provide oversight for Access Management capability, managing team workload and ensuring delivery of privileged access management (provisioning, deprovisioning, auditing) Ensure VA and ITHC results are analysed, triaged, and risk-scored based on potential business impact Ensure the organisation's risk appetite is understood and applied, and confirm all suppliers meet patch management requirements tied to SLA/KPI obligations Analyse and escalate risks from SLA/KPI shortfalls, feeding into the Governance, Risk, and Compliance structure Oversee the development, maintenance, and continuous improvement of the identity and access management framework What we're looking for Degree in Cyber Security / Information Security or equivalent practical experience Proven experience of leading or working in operational security teams Strong knowledge of security processes, procedures, and vulnerability management (on-premise and cloud) Experience using vulnerability scanning/management tools and interpreting results Proven ability to analyse security issues, assess risks, and recommend corrective action Experience leading and mentoring security teams in a collaborative environment Strong analytical skills, able to identify patterns, trends, and communicate risks effectively to stakeholders Must hold or commit to achieving DV clearance within 12 months of appointment Desirable:
Experience in vulnerability management within a regulated environment; relevant certifications (e.g., GIAC, GCIA, CISSP) What's on offer Annual bonus of up to 15%, made up of company and personal performance Attractive defined contribution pension scheme company matches up to 13.5% for a 7% employee contribution 30 days annual leave  bank holidays, plus ability to purchase an extra 2.5 days per year Ability to carry over 10 days annual leave each financial year Paid Sick Leave Family Friendly Policies Learning & Development Opportunities Welfare & Employee Assistance Programme Free Aviva Health App & Annual Health Check My Discounts Employee Savings & Discounts My Benefits Charity Giving Scheme Hybrid working arrangements (further details available upon application) Meaningful work with significant impact on national infrastructure resilience