Cyber Security Lead — Learning Tech Platform

Cambridge University Press & Assessment; Cambridge; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

28 days holiday

Private medical insurance

Discretionary bonus

Group pension scheme

Life assurance

Green travel

Job summary

Cambridge University Press & Assessment is seeking a Cyber Security Lead to own the security strategy and governance for our English Learning Technology. The role reports to the Deputy Director and partners with central security to align with enterprise strategy.

You will lead a small security operations team, manage risk visibility for applications, platforms, and suppliers, and drive secure-by-design practices.

Qualifications

• Experienced cyber security leader with senior track record.
• Experience implementing security strategy and risk management.
• Familiarity with ISO 27001, NIST, Cyber Essentials and OWASP.

Responsibilities

• Set the cyber security strategy and priorities for the function, in step with our wider security approach.
• Be the expert voice on cyber risk, giving senior leaders clear advice and honest challenge.
• Keep an authoritative view of our security posture across applications, platforms, suppliers and services.
• Lead security governance and reporting, so decision-makers can see the risks, threats and progress that matter.
• Shape technology, architecture and investment decisions, so security is built in from the start.
• Lead security assurance for major systems, projects and suppliers, and steer how we tackle vulnerabilities and incidents.
• Hold teams and suppliers to account for the controls and fixes they have committed to.
• Lead, coach and grow your security operations team.

Skills

Security strategy

Governance & risk

Stakeholder engagement

Cloud security (AWS)

DevSecOps

Education

Relevant degree in IT or security

Tools

AWS security services

SonarCloud

Tenable

Job description

Cambridge University Press & Assessment is seeking a Cyber Security Lead to own the security strategy and governance for our English Learning Technology. The role reports to the Deputy Director and partners with central security to align with enterprise strategy.

You will lead a small security operations team, manage risk visibility for applications, platforms, and suppliers, and drive secure-by-design practices.