Cyber Defence & Intelligence Manager — Threat & Response Lead

Financial Conduct Authority; Greater London; On-site; GBP 75,000 - 125,000; Full time

Benefits offered by this job

28 days annual leave plus bankholidays

Pension and life assurance (8-12%)

Private healthcare with Bupa

Income protection and EAP

Volunteer time

Job summary

Financial Conduct Authority seeks a Manager for the Centre for Cyber Defence and Intelligence to lead intelligence-led cyber defence, threat detection, and incident response. You will drive improvements in telemetry, detection logic and security operations while coordinating with Threat Intelligence, SOC, and Technology teams.

The role requires managing internal teams and external partners, shaping the detection roadmap, and delivering measurable risk reduction across cloud and enterprise

Qualifications

• Experience leading Cyber Security, Security Operations, Threat Intelligence or Detection Engineering teams.
• Experience managing cyber security partners and service providers.
• Ability to translate complex risks and data into executive insights and recommendations.
• Strong analytical skills and data-driven problem solving.

Responsibilities

• Lead and develop the FCA's Threat Intelligence, Detection and Incident Response capability.
• Drive continuous improvement of detection coverage and response effectiveness.
• Shape monitoring as AI and agent-based technologies are adopted.
• Own the detection improvement roadmap with SOC and tech teams.
• Lead internal teams and third-party partners for performance and growth.
• Establish cyber security metrics and executive reporting.
• Build relationships to share best practice and influence priorities.
• Ensure alignment with NIST CSF, MITRE ATT&CK, D3FEND, INFORM and NCSC standards.

Skills

Threat Intelligence

Security Operations

Detection Engineering

Exposure Management

Stakeholder management

Education

Cyber security certifications (e.g., CISSP, CISM, GIAC, SANS, Azure Security, AWS Security)

Tools

Microsoft Defender

Microsoft Sentinel

CrowdStrike

AWS Security Services

Job description

Financial Conduct Authority seeks a Manager for the Centre for Cyber Defence and Intelligence to lead intelligence-led cyber defence, threat detection, and incident response. You will drive improvements in telemetry, detection logic and security operations while coordinating with Threat Intelligence, SOC, and Technology teams.

The role requires managing internal teams and external partners, shaping the detection roadmap, and delivering measurable risk reduction across cloud and enterprise