Cyber Operations & 3rd Party Security Manager

Arbuthnot Latham; Greater London; Hybrid; GBP 36,000 - 76,000; Full time

Benefits offered by this job

1 day per week work from home

Private healthcare cover

Pension via market-leading provider

Discretionary bonus

Cycle to Work

Job summary

Arbuthnot Latham is seeking a senior cyber security operations lead in London to oversee monitoring, triage and incident response across the organisation. You will manage MDR and SOC providers, drive vulnerability management and risk controls while reporting to senior stakeholders.

The role requires strong governance, excellent communication and experience with ISO 27001, NIST CSF and regulatory expectations. Hybrid work arrangement includes one day a week from home, with competitive benefits.

Qualifications

• Strong experience in cyber security operations, incident response or security monitoring.
• Experience managing security service providers, SOC or MDR capabilities.
• Knowledge of cyber threats, attack techniques, threat intelligence and vulnerability management.
• Experience of security incident management and cyber crisis response.
• Experience of supplier cyber risk assessments and 3rd-party risk management.
• Understanding of ISO 27001, NIST CSF, FCA/PRA expectations and operational resilience requirements.
• Strong stakeholder management, communication and reporting skills.
• Minimum of one of the following: ISO27001 Lead Implementer or Lead Auditor.
• Desirable: CISSP, CISM, GIAC Incident Handler (GCIH), CCD or equivalent, ISO 27001 Lead Implementer or Lead Auditor, CRISC.

Responsibilities

• Lead our cyber security operations capability, including oversight of security monitoring and detection services.
• Manage relationships with MDR, SOC and threat intelligence providers.
• Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.
• Coordinate the operational response to cyber security incidents and support CIRP execution.
• Maintain incident response playbooks, escalation procedures and runbooks.
• Produce reporting and MI on security events, incidents and threats.
• Oversee vulnerability management across infrastructure, cloud, apps and endpoints.
• Ensure vulnerabilities are assessed, prioritized, tracked and remediated.
• Monitor threat intelligence sources and assess relevance to the tech landscape.
• Coordinate threat hunting activities and investigations from alerts and feeds.
• Identify recurring weaknesses and drive remediation actions.
• Lead 3rd-Party Cyber Risk Management framework.
• Review supplier security assessments, attestations and due diligence submissions.
• Oversee supplier vulnerabilities, cyber incidents, breaches and control deficiencies.
• Escalate material supplier cyber risks through governance forums.
• Support operational resilience and outsourcing for 3rd-party cyber security.
• Develop and maintain cyber security procedures and standards.
• Support ISO 27001 certification, regulatory compliance and audits.
• Contribute to cyber risk reporting for senior management and governance.
• Drive continual improvement of monitoring, incident management and 3rd-party risk.
• Support implementation of cyber security tooling including ServiceNow Security IR and 3rd-Party Risk.

Skills

Cyber security operations

Incident response

Security monitoring

Supplier risk management

ISO 27001 knowledge

NIST CSF knowledge

Stakeholder management

Lead Implementer/Auditor (ISO27001)

Security governance reporting

CISSP/CISM/GCIH (desirable)

Tools

ServiceNow

Security tooling

Job description

Salary: £36,000 - 76,000 per year

Requirements:

• Strong experience in cyber security operations, incident response or security monitoring.
• Experience managing security service providers, SOC or MDR capabilities.
• Knowledge of cyber threats, attack techniques, threat intelligence and vulnerability management.
• Experience of security incident management and cyber crisis response.
• Experience of supplier cyber risk assessments and 3rd-party risk management.
• Understanding of ISO 27001, NIST CSF, FCA/PRA expectations and operational resilience requirements.
• Strong stakeholder management, communication and reporting skills.
• Minimum of one of the following: ISO27001 Lead Implementer or Lead Auditor.
• Desirable: CISSP, CISM, GIAC Incident Handler (GCIH), Certified Cyber Defender (CCD) or equivalent, ISO 27001 Lead Implementer or Lead Auditor, CRISC.

Responsibilities:

• Lead our cyber security operations capability, including oversight of security monitoring and detection services.
• Manage relationships with Managed Detection and Response (MDR), SOC and threat intelligence providers.
• Ensure security events are triaged, investigated, escalated and resolved in accordance with policy and procedure.
• Coordinate the operational response to cyber security incidents and support execution of our Cyber Incident Response Plan (CIRP).
• Maintain incident response playbooks, escalation procedures and operational runbooks.
• Produce reporting and management information on security events, incidents and emerging threats.
• Oversee vulnerability management processes across infrastructure, cloud services, applications and end-user devices.
• Ensure vulnerabilities are assessed, prioritised, tracked and remediated in line with risk appetite and policy requirements.
• Monitor threat intelligence sources and assess relevance to our technology landscape.
• Coordinate threat hunting activities and investigations arising from security alerts and intelligence feeds.
• Identify recurring security weaknesses and drive remediation actions.
• Lead our 3rd-Party Cyber Risk Management framework.
• Assess supplier cyber security risks throughout the supplier lifecycle, including onboarding, ongoing monitoring and offboarding activities.
• Review supplier security assessments, control attestations, certifications and due diligence submissions.
• Oversee the management of supplier vulnerabilities, cyber incidents, breaches and control deficiencies.
• Ensure material supplier cyber risks are escalated and tracked through appropriate governance forums.
• Support operational resilience and outsourcing requirements relating to 3rd-party cyber security.
• Develop and maintain operational cyber security procedures and standards.
• Support ISO 27001 certification, regulatory compliance activities and audit engagements.
• Contribute to cyber risk reporting, metrics and management information for senior management and governance committees.
• Drive continual improvement of cyber monitoring, incident management and 3rd-party risk management capabilities.
• Support implementation and optimisation of cyber security tooling, including ServiceNow Security Incident Response and 3rd-Party Risk Management capabilities.

Technologies:

• Cloud
• Incident Management
• Support
• Security
• ServiceNow

More:

Arbuthnot Latham has been associated with banking since 1833, combining private and commercial banking, wealth planning and investment management with a traditional relationship and service-led approach powered by modern technology. We seek proactive individuals who embrace high standards and bring energy to a dynamic environment that values innovative ideas, stability and support for personal and professional growth. Our human-scale ethos means everyone is recognised as an individual, and our service-led, relationship-driven culture values in-person collaboration and wellbeing. We offer one day a week working from home, along with competitive holiday allowance, pension via a market-leading provider, private healthcare cover, 4x life assurance, discretionary bonus and a suite of flexible benefits including Cycle to Work, Gym Scheme, Health Assessment, Season Ticket/Travel loans and dental insurance. The role is based in London.

last updated 37 week of 2026