Cyber Security Manager

Archer Resourcing Ltd; Aberdeen City; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Archer Resourcing Ltd on behalf of our client is seeking an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. The role covers IT, OT, cloud environments and software products, with group-wide scope and impact.

You will develop the cyber security roadmap, define policies and controls, coordinate audits and drive risk management while collaborating with CIOs and senior IT leaders. Hybrid Aberdeen/Sheffield.

Responsibilities

• Lead cyber security governance across IT and OT, including policy development and risk reporting.
• Oversee incident response planning with external SOC partner and run playbooks and exercises.
• Ensure compliance with ISO 27001, SOC 2, NIST CSF, IEC 62443 and coordinate audits.
• Drive supplier due diligence and respond to security questionnaires and tenders.

Job description

Location: Aberdeen or Sheffield (Hybrid)

Our client, a growing engineering and technology group, is looking for an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. This is a high-impact, Group-wide role covering corporate IT, Operational Technology (OT), cloud environments and commercial software products, giving you real scope to shape strategy and make a visible difference.

The role

• Develop and own the Group cyber security roadmap alongside the CIO and IT leadership, covering IT, OT, cloud and digital products.
• Define and maintain cyber policies, standards and governance, including the cyber risk register, risk assessments and reporting to senior stakeholders.
• Lead incident response planning with an external SOC partner, including playbooks, tabletop exercises and post-incident reviews.
• Provide security governance across IT and OT environments, improving asset visibility, segmentation, secure remote access and vulnerability management without compromising safety or availability.
• Work with Software and Firmware Engineering teams to embed security throughout the SDLC and review the security architecture of customer-facing products.
• Oversee compliance with frameworks such as ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443, and coordinate internal and external audits.
• Lead supplier due diligence and support customer security questionnaires, tenders and assurance requests.

What you'll bring

• Significant experience in a cyber security governance, assurance or leadership role.
• Experience managing ISO 27001 or an equivalent ISMS.
• Strong understanding of enterprise security architecture, secure software development and cloud security (ideally Microsoft Azure).
• Knowledge of OT / Industrial Control System security.
• Strong risk management skills and the ability to explain complex technical risks clearly to technical and non-technical audiences.

Desirable

• Experience in the energy, industrial or engineering sectors.
• Experience with Cyber Essentials Plus, SOC 2, IEC 62443 or NIS2.
• Certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.