Technical Programme Manager - Cyber Security

Tesco UK
• Welwyn Garden City
• Hybrid
• Full-Time
• Permanent
• Working hours 36
• Apply by 27-Feb-2026

Technical Programme Managers (TPMs) deliver complex, cross-functional technology programmes that support colleagues and help serve our customers better. In this role, you will operate as a Cyber Programme Manager, leading the delivery of high-impact cyber security initiatives across Tesco's organisation.

You will primarily support Threat Intelligence & Detection Engineering (TIDE), working closely with security engineers, detection engineers, and operations teams to turn cyber strategy and intelligence outputs into delivered, measurable outcomes. While this role has a strong alignment to CTI and detection-led delivery, you will also be expected to flex and support other Cyber teams and programmes as required, depending on business priority.

This role requires hands‑on experience managing cyber delivery, navigating complex technical dependencies, and operating confidently in environments where risk, threat context, and regulatory expectations shape delivery decisions.

We're all about the little helps. That's why we make sure our Tesco colleague benefits package takes care of you - both in and out of work.  to find out more!

• Annual bonus scheme of up to 20% of base salary
• Holiday starting at 25 days plus a personal day (plus Bank holidays)
• Private medical insurance
• 26 weeks maternity and adoption leave (after 1 years' service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing

While responsibilities will evolve with business needs, the core accountabilities include:

• Deliver complex cyber security programmes with multiple technical, operational, and risk dependencies that directly impact Tesco's security posture and business resilience.
• Lead programmes that support threat‑informed defence, detection engineering, intelligence‑led prioritisation, and cyber risk reduction.
• Establish and continuously improve programme delivery approaches suited to cyber and security environments (mixing agile, iterative and more traditional delivery where appropriate).
• Shape and lead programmes with ambiguous scope, evolving threat landscapes, and uncertain delivery paths.
• Create, own, and maintain integrated delivery plans, covering technical implementation, operational readiness, and change impacts.
• Act as the central point of coordination across Cyber teams (e.g. CTI, Detection Engineering, SOC, Security Engineering, IAM, Cloud Security), Product, Engineering, and Operations.
• Proactively identify delivery risks and issues, facilitate informed trade‑off discussions, and manage escalations with clarity and confidence.
• Translate cyber strategy, intelligence outputs, and security objectives into clear programme goals, milestones, and measurable outcomes.
• Understand cyber and security architectures sufficiently to anticipate dependency, sequencing, and integration risks.
• Support annual and in‑year planning, financial forecasting, and budget management for cyber programmes.
• Build strong relationships with internal stakeholders, suppliers, and partners, holding them to account for delivery outcomes.
• Support vendor selection and management activities, including tendering, SLAs, and delivery assurance.
• Provide delivery leadership, mentoring, and coaching to TPM peers and delivery roles within Cyber.
• Contribute to the wider TPM and Cyber delivery community, sharing good practice and continuously raising the bar for programme execution.

Your role is to enable and accelerate delivery, ensuring complex cyber initiatives are well‑sequenced, outcomes‑focused, and sustainably embedded.

Essential

• Minimum of 2 years' experience managing cyber security delivery, programmes, or portfolios within a Cyber, Security, or Technology Risk environment.
• Proven track record delivering complex technology or security initiatives across multiple teams and…