Cyber Security Lead

Ocado Retail Limited; Hatfield; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading online retailer is seeking a Cyber Security Lead to oversee its Cyber Security Operations. The role requires expertise in team leadership, incident management, and cloud security. You'll be responsible for improving policies and processes, managing vulnerabilities, and advising stakeholders. The ideal candidate will have significant experience in the information security field and familiarity with various security frameworks and tools. This position offers a hybrid work model in Hatfield, providing opportunities for personal and professional growth.

Benefits

Private medical insurance

Discounted gym memberships

Annual bonus scheme

26 days holiday plus 8 flexible bank holidays

Free shuttle bus from Hatfield station to the office

Qualifications

• Proven experience in an Information / Cyber Security team.
• Experience with cloud security environments (AWS, Azure, GCP).
• Deep understanding of security frameworks (e.g., NIST, ISO 27001).
• High-level understanding of security concepts and tools.

Responsibilities

• Lead and coach the Cyber Security Team.
• Own and produce incident management procedures.
• Maintain understanding of cyber security risk maturity.
• Advise stakeholders as a Security SME.

Skills

Information Security experience

Cloud Security knowledge

Understanding of security frameworks

Technical security concepts

Experience with security tools

Cyber threat understanding

Tools

Rapid7

MS Defender

Netskope

Password Management Solutions

Job description

Vacancy Information

• Vacancy Name: Cyber Security Lead
• Vacancy No: VN1208
• Job Type: Permanent
• Location: Hatfield (Hybrid working - 3 days in the office)
• Contract type: Permanent
• Working hours per week: 40 hours
• Level: Lead
• Application Closing Date: 23rd January 2026

About us

Our mission is to deliver joy in every shop, through unbeatable choice, unrivalled service, and reassuringly good value. We're Ocado Retail, a market-leading joint venture between Ocado Group and M&S, and the world's largest dedicated online supermarket, ocado.com. Not only is Ocado.com the only place to shop a full range of M&S food online, it's also the home to the widest online supermarket range in the UK and champion of small, independent brands. We're also the brains behind Zoom by Ocado, our same‑day grocery delivery service.

About the team and the role

This is an exciting opportunity for a proactive, technically‑minded, and organised Cyber Security Lead to take a leading role in running our Cyber Security Operations. You will have the opportunity to make your mark by leading and refining the Cyber Security team, and working closely with our IT, Data, and Compliance teams. The ideal candidate will review and improve policies, processes, and procedures, work with suppliers to monitor service KPIs and SLAs and strive for exceptional standards of cybersecurity engineering.

What you'll do

• Team Leadership: Lead and coach the Cyber Security Team, mentoring and enabling the wider IT team to become their own security technologists.
• Incident Management: Own and produce incident management procedures and runbooks to ensure effective response to security events.
• Strategy and Risk: Maintain a comprehensive understanding of the organisation's cyber security risk maturity and assist in the maintenance of a risk register for identifying and tracking security risks within business operations.
• Stakeholder Advisory: Act in an advisory capacity as a Security SME to stakeholders and project leads, liaising across the business to ensure sufficient controls are in place to mitigate known security risks.
• Project Management: Own and manage Information Security projects and initiatives.
• Vulnerability Management: Manage and coordinate penetration and vulnerability test schedules to identify weaknesses.
• Supplier Management: Strategically manage the relationships, performance, and commercial agreements with 3rd party cybersecurity tooling vendors to ensure service delivery, compliance, and optimal value.

Who you are

• Experience: Must have proven experience working within an Information / Cyber Security team, having held a lead position or demonstrating the ability to step up into this key role.
• Cloud Security: Working knowledge of security in a cloud‑first environment, with prior experience of security across multiple clouds (AWS, Azure, GCP) and SaaS vendors.
• Security Frameworks: Demonstrates a deeper understanding of multiple security frameworks (e.g., NIST, ISO 27001).
• Technical Knowledge: High‑level understanding of technical security concepts, tools, and capabilities, including Zero Trust concepts.
• Tooling: Experience with security tooling such as Rapid7, MS Defender, Netskope, and Password Management Solutions.
• Threat Intelligence: Demonstrates understanding of cyber threats and how they impact the organisational risk position.

Nice to Haves

• Certifications: Has CCSP and/or CISSP, or is working towards one (or more) of these qualifications and is keen to develop skills further.
• Program Leadership: Prior experience leading an Information Security Programme would be advantageous.
• Team Building: Previous involvement in building and managing Security teams.

What's in it for you

By joining Ocado Retail, you'll have the chance to experience life at the world's largest online retailer, work with an amazing bunch of people who challenge what's possible each day, and grow your skills and career in online retail. If that's not enough to tempt you, you'll also get access to loads of great benefits to sweeten the deal. Here's a taste of what we offer:

Health & Wellbeing: Private medical insurance with option to add your family, Digital GP appointments, market‑leading family policies, mental health support, discounted gym memberships, dental insurance, and more.

Spend & Save: Annual bonus scheme split between personal and business objectives, recognition with reward platform, up to 7% matched pension contributions, 15% Ocado discount, 20% M&S discount, free breakfast every day in the office, electric vehicle leasing scheme, and free shuttle bus from Hatfield station to the office.

Never miss the moments that matter: Hybrid working, 26 days holiday plus 8 flexible bank holidays, options to buy extra holiday, 2 weeks work from anywhere, and lifestyle break opportunities.

Our Hiring Process

Lucky for us, we receive a high volume of applications and genuinely appreciate the time and effort invested by every candidate. To ensure a fair and thorough process, every application is reviewed by a member of our team. If your skills and experience are a strong match, a Talent Partner will contact you to discuss the role and guide you through the next steps of our hiring process.

Your Application and AI

In the spirit of innovation, we welcome you to use AI tools in your application, just as we use them in our own business at Ocado Retail. However, as you leverage this technology, please don't lose sight of the most important element: your unique self. Your experiences, passions, and personality are what truly set you apart. Ensure that your application still authentically conveys who you are and why you're a great fit for us.

Everyone's welcome

We're an equal opportunities employer, which means that we make sure all potential colleagues are treated fairly and equally. We want to ensure everyone has a fair chance to apply; if you need this job description in an alternative format (e.g., larger print, different document type, etc.), please reach out to us at [e-mail] and we'll be happy to assist you, and if you require reasonable adjustments during the recruitment process, please let us know on the application form.