Cyber Security Lead: Build & Own Enterprise Cloud Security

Grconsulting; United Kingdom; Remote; GBP 90,000 - 120,000; Full time

Job summary

Grconsulting is seeking a Cyber Security Lead to own the enterprise security posture across Microsoft cloud, identity and endpoint environments in the United Kingdom. You will be the technical security authority, shaping the security roadmap and implementing controls across Defender, Intune, Entra ID, Azure, and M365.

This hands-on leadership role requires building a security function from the ground up, managing major incidents end-to-end, and guiding governance, risk, and compliance activities

Qualifications

• Proven leadership of enterprise cyber security programs.
• Experience building a security function from ground up.
• Strong hands-on technical expertise with Microsoft security stack.

Responsibilities

• Lead design and optimization of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365.
• Own identity protection, device compliance, and endpoint hardening strategies.
• Lead cyber incident response, containment, and remediation activities.
• Oversee vulnerability management and policy enforcement across the estate.
• Drive continuous improvement in detection, response, automation and cloud security posture.
• Support governance activities including risk assessments, audits and compliance.

Skills

Cyber security leadership

Hands-on engineering

Security governance

Education

Certifications (SC-200/SC-300/AZ-500/MS-102/CISSP)

Tools

Microsoft Defender XDR

Intune

Entra ID

Azure security controls

Microsoft Sentinel

KQL & Sentinel playbooks

Job description

Grconsulting is seeking a Cyber Security Lead to own the enterprise security posture across Microsoft cloud, identity and endpoint environments in the United Kingdom. You will be the technical security authority, shaping the security roadmap and implementing controls across Defender, Intune, Entra ID, Azure, and M365.

This hands-on leadership role requires building a security function from the ground up, managing major incidents end-to-end, and guiding governance, risk, and compliance activities