Cyber Security Manager

Up to £70,000 base + 20% bonus + up to 15% pension
Permanent | UK remote | One office day per fortnight, with travel fully expensed

Take ownership of the cyber security roadmap, set the standards your security suppliers are expected to meet and lead the work towards ISO 27001 certification.

Reporting to the Head of Data & Technology, you’ll work with Risk, Compliance and Technology Operations to decide which security gaps to tackle first and make sure they’re resolved. The managed service provider (MSP) handles technical delivery. You’ll set expectations, challenge performance and verify that fixes work.

What you’ll own

• Cyber security strategy and assurance. Set priorities, track remediation and explain cyber risks and decisions to senior stakeholders.

• MSP security performance. Challenge service reporting, follow up on vulnerabilities and penetration test findings, and verify the evidence before closing actions.

• Microsoft security oversight. Guide the MSP on good practice for Microsoft Defender and Intune, including endpoint coverage and monitoring.

• ISO 27001 readiness. Identify control gaps, agree remediation priorities and build the evidence needed for certification.

• Security awareness. Roll out KnowBe4 training and phishing simulations, track results and use them to target follow-up.

What you’ll bring

• Cyber or information security experience in FCA-regulated financial services or a similarly regulated environment.

• A track record of holding an MSP, managed security provider or outsourced SOC to account for security outcomes.

• Practical experience with ISO 27001. Taking an organisation through certification would be particularly valuable.

• The technical judgement to challenge suppliers and the communication skills to explain security risks clearly to colleagues outside technology.

If you’re ready to own the cyber roadmap and see improvements through from the first risk discussion to verified closure, apply with your CV for a confidential conversation.