Cyber Security Lead: Own Security for Cutting-Edge Tech

Ceres Power Holdings Plc; Horsham; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Ceres Power Holdings Plc in the United Kingdom is seeking a Cyber Security Lead to own and drive the security programme, ensuring risk-based controls and governance across Microsoft 365, cloud services, and supplier ecosystems.

You will lead incident response, vulnerability management, audits, and security awareness initiatives, coordinating with procurement, legal, and IT to protect data and IP as the business scales its clean technology platforms.

Qualifications

• Knowledge of information security best practices and standards (ISO 27001, Cyber Essentials)
• Hands‑on experience with cloud services (Office 365, Azure, AWS) and security tooling (MDM/EMS/Intune/Airwatch)
• Experience managing a SOC and conducting security audits and penetration testing

Responsibilities

• Own and lead the cyber security programme, ensuring risk-based controls and governance across the organisation
• Coordinate vulnerability management, incident response, and security assessments to reduce risk
• Develop and maintain information security policies, standards and supporting documentation
• Collaborate with procurement, legal, operations and technical teams to manage third‑party cyber risk
• Act as primary technical contact for outsourced SOC and drive security awareness across the business

Skills

Security governance

ISO 27001

Cyber Essentials

Office 365

Azure

AWS

Entra P2

Azure Rights Management

DLP

MDM

EMS

Intune

Airwatch

SOC management

Audit processes

PEN testing

Vulnerability scanning

Networking security

Project management

Tools

Office 365

Azure

AWS

Entra P2

Azure Rights Management

DLP

MDM

EMS

Intune

Airwatch

Job description

Ceres Power Holdings Plc in the United Kingdom is seeking a Cyber Security Lead to own and drive the security programme, ensuring risk-based controls and governance across Microsoft 365, cloud services, and supplier ecosystems.

You will lead incident response, vulnerability management, audits, and security awareness initiatives, coordinating with procurement, legal, and IT to protect data and IP as the business scales its clean technology platforms.