Cyber Security Manager

La Fosse; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Fast-paced work environment

Opportunity for career growth

Job summary

La Fosse is seeking a Cyber Security Manager in London Bridge to join a regulated financial services organisation. The role is pivotal in managing security across various projects, with a focus on security assurance and vulnerability management.

Ideal candidates will have experience in cyber security, strong risk judgement, and the ability to communicate security risks in business terms. You'll work in a dynamic environment with opportunities for growth and exposure to various security tools and projects.

Qualifications

• Experience in cyber security, information security, or security assurance.
• Strong understanding of security in projects and business environments.
• Ability to assess security risk across infrastructure and applications.

Responsibilities

• Act as the security point of contact for business change.
• Review project designs from a security perspective.
• Conduct security risk assessments and support sign-offs.
• Coordinate penetration testing activities.

Skills

Cyber security

Security assurance

Risk management

Communication skills

Vulnerability management

Tools

Tenable

Qualys

Job description

Cyber Security Manager – London Bridge / Hybrid (3 days office-based) – Competitive Salary + Benefits

We are partnered with a fast-growing, regulated financial services organisation that provides payments and FX infrastructure across hard-to-reach and emerging markets. The business is continuing to invest in its security capability and is now looking for a Cyber Security Manager to play a key role across secure change delivery, security assurance and vulnerability management.

This is a broad, hands‑on management role within a small, high‑trust security team. It would suit someone with strong security risk judgement, good technical awareness and the communication skills to work confidently with project teams, architects, engineers and senior stakeholders. The role is not a security architect or engineering position, but you will need enough technical depth to review designs, challenge decisions, coordinate testing and translate security risk into clear business language.

Responsibilities

• Act as the security point of contact for business change, technology projects and new capability delivery.
• Review project designs, architecture proposals and technology changes from a security risk perspective.
• Provide practical security guidance to project, engineering and delivery teams to help ensure change is delivered securely.
• Conduct security risk assessments and support formal security sign‑off for material changes.
• Own and coordinate penetration testing activity, including scoping tests, managing suppliers, reviewing findings and tracking remediation.
• Support the vulnerability management programme using tools such as Tenable, Qualys or similar platforms.
• Review vulnerability data, prioritise risk based on business impact and work with technical teams to drive remediation.
• Produce clear reporting and updates for stakeholders on vulnerability trends, testing outcomes and remediation progress.
• Contribute across the wider security function as part of a small team, including incident response, assurance and governance activities where required.
• Help resolve tension between business delivery and security requirements through pragmatic, commercially aware risk management.

Requirements

• Experience in cyber security, information security, security assurance, security risk or a related consultancy role.
• Strong understanding of security in the context of projects, change delivery and business‑as‑usual environments.
• Experience coordinating penetration tests, reviewing findings and working with teams to remediate issues.
• Familiarity with vulnerability management tooling such as Tenable, Qualys or equivalent.
• Enough technical knowledge to assess security risk across infrastructure, applications and architecture, without needing to be a hands‑on engineer.
• Strong communication skills, with the ability to explain security risk in business terms.
• Proven experience managing senior stakeholders and influencing across technical and non‑technical audiences.
• A self‑starter mindset, comfortable working in a small team where priorities can shift and people wear multiple hats.
• Experience in a regulated environment would be advantageous.
• Consultancy, contractor or permanent backgrounds will all be considered.

The team offers the opportunity to work in a fast‑paced, agile and friendly environment with a strong social mission, supporting payments into complex and hard‑to‑reach markets. You will join an experienced security leader with a strong industry reputation and have the chance to gain broad exposure across security tools, projects, assurance and incident response.