Cyber Security Lead

Ceres; Horsham; On-site; GBP 90,000 - 125,000; Full time

Job summary

Ceres Power is seeking an experienced Cyber Security Lead to own and advance our security programme. You will implement and govern security controls, lead vulnerability management and coordinate incident response with stakeholders across the organisation.

You will collaborate with procurement, legal, and operations to manage third‑party risk and drive security improvements that support our global licensing and growth initiatives.

Qualifications

• Experience with ISO 27001 and Cyber Essentials certifications.
• Cloud security expertise across Office 365, Azure and AWS.
• Hands-on with SOC operations and security tooling.
• Experience in vulnerability management and pen testing.
• Strong governance, risk and compliance documentation.

Responsibilities

• Own and lead the cyber security programme across the organisation.
• Coordinate incident response, threat detection and remediation activities.
• Implement and maintain information security policies, standards and controls.
• Engage with internal and external audits and risk assessments.
• Manage third‑party cyber security risk and vendor security reviews.

Skills

ISO 27001

Cyber Essentials

SOC management

Penetration testing

Vulnerability scanning

Security governance

Audits

3rd line support

Networking security

Cloud security

Tools

Office 365

Azure

AWS

Entra P2

Azure Rights Management

DLP

MDM

EMS

Intune

Airwatch

Job description

Ceres Power is a global leader in solid oxide technology, driving the clean energy revolution. Our steel-supported fuel cell and electrolyser technology gives partners a decade of development advantage, accelerating innovation in power generation, green hydrogen, and distributed power solutions for data centres and industry.

Cyber security is a critical part of protecting Ceres' people, systems, data and intellectual property as we continue to grow through technology innovation and global licensing partnerships. As cyber threats become more sophisticated and regulatory expectations continue to evolve, we are looking for an experienced Cyber Security Lead to take ownership of our cyber security programme and help ensure our technology environment remains secure, resilient and compliant.

This is a hands‑on role that combines technical delivery, operational support and stakeholder engagement. Acting as Ceres' cyber security subject matter expert, you will lead a structured, risk‑based security programme, ensuring that security controls, technologies, policies and processes are effective, well‑governed and aligned with the needs of the business.

Working closely with the Technical Operations team and key stakeholders across the organisation, you will be responsible for the implementation, management and continual improvement of our cyber security capabilities. This includes ownership of core Microsoft 365 security technologies, enhancing email security controls, supporting wider infrastructure security, and ensuring security considerations are embedded into projects, systems and business processes from the outset.

You will play a leading role in identifying and reducing cyber risk across the organisation through vulnerability management, penetration testing, security assessments and the effective monitoring of threats and security events. Acting as a key technical contact during cyber security incidents, you will help coordinate investigation, reporting, escalation and remediation activities to minimise business risk and drive continuous improvement.

The role will also be responsible for maintaining and developing information security policies, standards and supporting documentation, ensuring a consistent and practical approach to governance, risk management and compliance. You will support internal and external audits, own cyber security‑related actions and remediation plans, and ensure findings are tracked through to completion.

As Ceres continues to expand its licensing and supplier network, you will work closely with procurement, legal, operational and technical teams to assess and manage cyber security risks associated with third‑party suppliers and licensing partners. This includes supporting onboarding activities, conducting security reviews and ensuring appropriate controls are in place across both internal and third‑party environments.

You will also act as the primary technical contact for our outsourced Security Operations Centre (SOC), ensuring an effective partnership is in place to support monitoring, threat detection and incident response activities. In addition, you will help foster a strong security culture across the business through cyber security awareness initiatives, guidance and training.

This is an excellent opportunity for a cyber security professional who enjoys taking ownership, influencing stakeholders and delivering practical security improvements that directly support the growth and success of a pioneering clean technology business.

Knowledge and Skills Required for the Role:

• Knowledge of information security best practices and certification processes like ISO 27001 and Cyber Essentials
• Technical knowledge of cloud services like Office 365, Azure, AWS, Entra P2, Azure Rights Management, and DLP
• Experience with the implementation of security tools like MDM, EMS, Intune, and Airwatch
• Experience working with or managing a SOC
• Detailed knowledge of audit processes and procedures
• Hands‑on experience in a 3rd line operational role
• Understanding of security testing procedures like PEN testing and vulnerability scanning
• Knowledge of networking and security best practices