Cyber Security Lead

About the role

We are seeking an experienced Cyber Security Lead to shape and advance cyber security capability across a large, complex organisation. The role oversees governance, risk management, security assurance and continuous improvement of controls, aligning with industry best practices and business objectives.

Key responsibilities

• Provide strategic cyber security advice for projects, infrastructure, applications and business initiatives.
• Lead security risk assessments and cyber security initiatives in line with the organisation’s security strategy.
• Conduct and manage security reviews of applications, systems, cloud environments and infrastructure.
• Coordinate third‑party security risk assessments and remediation activities.
• Lead investigations and response activities for cyber security incidents and threats.
• Develop, maintain and improve security policies, standards and governance frameworks.
• Manage relationships with Managed Security Service Providers (MSSPs).
• Drive cyber security awareness and education programmes across the organisation.
• Collaborate with internal teams, vendors and business stakeholders to improve security outcomes.

Required profile

• Strong experience in cyber security governance, risk and assurance.
• Ability to engage and influence stakeholders at all levels.
• Degree qualification in Information Security, Cyber Security, IT or a related discipline.
• Proven experience leading cyber security initiatives in large enterprise or government environments.

Required skills

• Microsoft Azure security
• Microsoft Entra ID security
• Security assessments and reviews of applications, systems and infrastructure
• Knowledge of cyber security frameworks and standards: ASD Essential Eight, ISM, NIST, ISO 27001, ISO 27002, ISO 27005
• Understanding of security control design, implementation and monitoring
• CISSP, CISM or CISA certification (highly desirable)