Cyber Defence & Intelligence Manager: Threat, Detection & Response

Financial Conduct Authority; City of Edinburgh; On-site; GBP 75,000 - 125,000; Full time

Benefits offered by this job

28 days annual leave + holidays

Pension and life assurance

Private healthcare & protection

35 hours volunteering

Job summary

Financial Conduct Authority seeks a Manager to lead the CCDI function within the Cyber & Information Resilience division. You will translate threat intelligence into monitoring priorities, drive telemetry and detection improvements, and coordinate with SOC providers and technology teams to strengthen cyber defence across UK offices.

The role emphasizes leadership, governance, and measurable improvements in incident response, with a focus on risk reduction and resilience in a highly regulated

Qualifications

• Experience leading Cyber Security, Security Operations, Threat Intelligence or Detection Engineering teams.
• Solid knowledge of modern cyber threats, detection, threat intelligence and incident response.
• Effective stakeholder management and communication skills, with the ability to translate complex risks into executive insights.
• Advanced analytical and problem-solving skills using data-driven approaches.

Responsibilities

• Lead and develop the FCA's Threat Intelligence, Detection and Incident Response capability.
• Drive continuous improvement of detection coverage, telemetry and response effectiveness.
• Shape security monitoring to AI and agent-based technologies adoption.
• Own the detection improvement roadmap with SOC and tech teams.
• Lead internal teams and partners to ensure performance and growth.
• Establish cyber security metrics, KPIs and executive reporting.

Skills

Threat Intelligence

Security Operations

Detection Engineering

SOC Performance Management

Stakeholder Engagement

Data-driven Decision Making

Tools

Microsoft Defender

Microsoft Sentinel

CrowdStrike

AWS Security Services

Job description

Financial Conduct Authority seeks a Manager to lead the CCDI function within the Cyber & Information Resilience division. You will translate threat intelligence into monitoring priorities, drive telemetry and detection improvements, and coordinate with SOC providers and technology teams to strengthen cyber defence across UK offices.

The role emphasizes leadership, governance, and measurable improvements in incident response, with a focus on risk reduction and resilience in a highly regulated