Cyber Security

Panoramic Associates; Marlborough; On-site; GBP 50,000 - 67,000; Full time

Benefits offered by this job

Hybrid work

On-site London (3 days/wk)

Job summary

Local Authority in the UK seeks a Cyber Security Lead to shape strategy, governance and operational resilience for a large public sector organisation.

This hands-on leadership role is based on a hybrid working model with three days on-site in London and two days working from home, offering a salary of £50,000 to £67,000 per year. You will collaborate with senior ICT stakeholders to protect critical systems and sensitive data.

Qualifications

• Cyber security leadership experience in public sector/regulated environments.
• Knowledge of NCSC-aligned security principles and governance approaches.
• Experience with security compliance and audit-readiness (PSN, PCI-DSS, GDPR, Cyber Essentials Plus).
• Experience with Microsoft security tooling (Sentinel, Defender, M365 E5).
• Experience with ITIL and change governance.

Responsibilities

• Lead cyber security strategy, policies, standards, and operating model.
• Embed security by design in technology change governance and chair governance forums.
• Oversee security operations across SIEM, firewalls, EPP, IAM, and secure config.
• Manage cyber security across cloud/hybrid environments (Microsoft 365, Azure).
• Lead vulnerability management, testing, remediation, and evidence gathering.
• Coordinate incident response, investigation, reporting, and post-incident actions.
• Maintain compliance/evidence for PSN, PCI-DSS, Cyber Essentials Plus, GDPR.
• Drive security awareness and practical secure ways of working.
• Manage supplier performance and outsourced security services.
• Line manage staff and budget.

Skills

Cyber security leadership

NCSC-aligned security principles

Security governance

Audits & compliance

Incident response

ITIL governance

Tools

Azure

Microsoft 365

Sentinel

Defender

Job description

Salary: £50,000 - 67,000 per year

Requirements

• Cyber security leadership or management experience within a public sector, regulated, or complex enterprise environment.
• Knowledge of NCSC-aligned security principles and practical governance and assurance approaches.
• Experience with security compliance and audit-readiness, including frameworks such as PSN, PCI-DSS, GDPR, Cyber Essentials Plus, and similar.
• Experience with Microsoft security tooling such as Sentinel, Defender, and Microsoft 365 E5 security capabilities; exposure to Copilot for Security is beneficial.
• Experience operating within structured service environments such as ITIL and change governance.
• ISO 27001-aligned policy and control design and implementation experience is desirable.
• Ability to support out-of-hours response activity when required, including security incidents.
• Some travel may be required.

Responsibilities

• We own and lead our organisations cyber security strategy, policies, standards, and operating model.
• We embed security by design within technology change governance, including active participation in the Change Advisory Board and leadership of an Information Security governance forum.
• We oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration.
• We manage cyber security across cloud and hybrid environments, including Microsoft 365 and Azure, with oversight of patching assurance, disaster recovery, and business continuity testing.
• We lead vulnerability management and security testing activity, including internal scanning, external testing, remediation tracking, and evidence gathering.
• We manage and coordinate incident response, investigation, reporting, and post-incident improvement actions.
• We maintain compliance and evidence for key standards and frameworks, including PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit, and wider public sector assurance requirements.
• We drive security awareness and practical adoption of secure ways of working across the business.
• We manage supplier performance and outsourced security services to ensure controls are effective and audit-ready.
• We line manage and develop staff, and manage a small security budget.

Technologies

• Azure
• Cloud
• Copilot
• ICT
• Support
• ITIL
• Microsoft 365
• Security
• Office 365

More

We are supporting a Local Authority in the search for a Cyber Security Lead to provide cyber security strategy, governance, and operational resilience for a large public sector organisation. This is a hands‑on leadership role based on a hybrid working model with three days on‑site in London and two days working from home, offering a salary of £50,000 to £67,000. You will work closely with senior ICT stakeholders, service providers, and internal teams to protect critical ICT infrastructure and sensitive data, ensure compliance with national standards, embed security by design, maintain assurance, drive continuous improvement, and lead incident response when required.

last updated 33 week of 2026