Cyber Security Manager

Card Factory; Wakefield; Hybrid; GBP 75,000 - 85,000; Full time

Job summary

Card Factory is seeking a Cyber Security Manager in Wakefield, offering hybrid work (2 days per week) with a salary of £75,000–£85,000 plus benefits. The role combines hands-on technical work with leadership, mentoring a team of Security Analysts and shaping security strategy.

You will secure cloud environments (AWS/Azure), lead investigations, and drive improvements in tooling, vulnerability management and security governance across the business.

Qualifications

• Hands-on experience securing cloud environments across AWS and Azure.
• Strong background in operations, incident response and investigations.
• Experience with EDR/XDR platforms, Microsoft security solutions, vulnerability management tools and email security technologies.
• Knowledge of Microsoft 365, Entra ID and modern identity and access management practices.
• Experience leading vulnerability remediation and continuous improvement programmes.

Responsibilities

• Lead investigations into incidents and enhance monitoring and response capabilities.
• Own security tooling estate across AWS, Azure and Microsoft 365 environments.
• Drive vulnerability management, coordinate penetration testing, address risk with technology teams.
• Lead and develop a team of Security Analysts and translate technical challenges into clear recommendations.

Skills

Cloud security

Incident response

Security tooling

People leadership

Stakeholder management

Threat monitoring

Tools

AWS

Azure

EDR/XDR

Microsoft security

Vulnerability tools

Email security

Job description

About The Role

Cyber Security Manager

Wakefield (Hybrid - 2 days per week) Salary £75,000 - £85,000 (depending on experience) + Benefits

Are you a hands-on cyber professional who enjoys leading from the front?

We're looking for an experienced Cyber Security Manager to help protect our colleagues, customers, systems and data across a complex and evolving technology landscape.

With over 1,100 stores, a thriving e-commerce operation and a growing international presence, keeping our business secure is critical to everything we do. This is an exciting opportunity to join a business where you'll have genuine influence, helping to strengthen our capabilities while supporting innovation and growth.

This role combines technical expertise with people leadership. You'll stay close to the technology, leading investigations, enhancing our tooling and cloud environments, and developing a talented team of Security Analysts.

What You'll Be Doing

You'll lead investigations into incidents, helping the business identify, contain and learn from emerging threats, while continually enhancing our monitoring and response capabilities.

You'll take ownership of our security tooling estate, ensuring key platforms remain effective, reliable and aligned to business needs. Working across AWS, Azure and Microsoft 365 environments, you'll help strengthen controls, improve resilience and support the secure delivery of technology solutions.

You'll also play a key role in driving improvements across the organisation, leading our vulnerability management programme, coordinating penetration testing activities and partnering with technology teams to address risk in a practical and effective way.

Alongside the technical aspects of the role, you'll lead and develop a team of Security Analysts, creating an environment where people can learn, grow and succeed. You'll build strong relationships across the business, translating technical challenges into clear recommendations that support informed decision-making.

This is an opportunity to shape and influence the future direction of security within a large and evolving organisation, combining hands-on technical work with leadership, coaching and strategic impact.

What We're Looking For

• Hands-on experience securing cloud environments across both AWS and Azure.
• A strong background in operations, incident response and investigations.
• Experience working with technologies such as EDR/XDR platforms, Microsoft security solutions, vulnerability management tools and email security technologies.
• Knowledge of Microsoft 365, Entra ID and modern identity and access management practices.
• Experience leading vulnerability remediation and continuous improvement programmes.
• Strong stakeholder management skills, with the ability to communicate technical risks in a clear and business-focused way.
• Experience leading, mentoring or developing technical professionals.
• Knowledge of recognised frameworks and standards such as ISO 27001, NIST CSF, PCI DSS and Cyber Essentials Plus.
• Experience within a retail, e-commerce or multi-site environment would be beneficial, although we welcome applications from candidates with transferable experience from other sectors.

Professional Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• CCSP (Certified Cloud Security Professional)
• GIAC certifications such as GCIH, GCFA or GCIA
• CompTIA CySA+ or Security+

Why Join Us?

This is a fantastic opportunity to make a real impact in a large, complex and rapidly evolving business. You'll work with modern technologies, influence strategy, support critical business operations and help develop the next generation of talent.

We're committed to creating an inclusive workplace where everyone feels welcome, valued and able to be themselves. We encourage applications from people of all backgrounds and experiences. If you require any reasonable adjustments during the recruitment process, we'll be happy to support you.