Cyber Security Manager

Synergetic; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A major UK local authority is seeking an experienced Cyber Security Manager to lead its cyber-resilience strategy and protect essential public services. You will oversee cyber security governance, incident response, and compliance with frameworks such as PSN and PCI-DSS. This key leadership role requires close collaboration with stakeholders and internal teams to embed security practices across ICT services while managing security tools like Microsoft Sentinel and Defender.

Qualifications

• Proven experience in a cyber security leadership role.
• Strong knowledge of compliance standards such as PSN, PCI-DSS, Cyber Essentials Plus.
• Ability to manage complex cyber security environments.

Responsibilities

• Lead the local authority’s cyber security framework, policies, and standards.
• Own vulnerability management, security monitoring, and incident response.
• Ensure compliance with NCSC, PSN, PCI-DSS, GDPR and other national frameworks.

Skills

Cyber security governance

Incident response

Regulatory compliance

Vulnerability management

Security monitoring

Secure design advisory

Tools

Microsoft Sentinel

Microsoft Defender

E5 Security

Job description

Job Description

Cyber Security Manager – Local Authority

Location : London, Hybrid (3 days onsite / 2 days WFH)

Contract : Permanent

Our client, a major UK local authority, is seeking an experienced Cyber Security Manager to lead its cyber-resilience strategy and protect the systems and data that support essential public services.

This is a key leadership role overseeing cyber security governance, incident response, regulatory compliance (PSN, PCI-DSS, Cyber Essentials Plus), and the secure operation of cloud and hybrid environments. You’ll work closely with senior stakeholders, outsourced partners, and internal teams to embed security by design across all ICT services.

What you’ll do :

• Lead the local authority’s cyber security framework, policies, and standards
• Own vulnerability management, security monitoring, and incident response
• Ensure compliance with NCSC, PSN, PCI-DSS, GDPR and other national frameworks
• Manage SIEM, Microsoft security tooling (Sentinel / Defender / E5), identity & access, firewalls, and endpoint protection
• Advise on secure design for projects and change governance
• Prepare annual compliance submissions and liaise with accreditation bodies