Cyber Security Manager

Zealous Agency; West Midlands; Hybrid; GBP 75,000 - 85,000; Full time

Benefits offered by this job

Car allowance

Bonus

Job summary

Zealous Agency is seeking a senior cyber security leader to overhaul and govern a modern security programme across a multi-site, cloud-first enterprise in the West Midlands. You will lead, design, and continually improve the information security strategy with hands-on delivery when needed.

You will present to Board/ExCo risk sessions, translate technical risk to business impact, and grow the security team while partnering with IT, legal and vendors to modernise security operations.

Qualifications

• Proven experience leading cyber and information security in complex, multi-site or cloud-first environments.
• Strong knowledge of NIST CSF 2.0, ISO 27001, PCI DSS, and UK GDPR.
• Hands-on incident response leadership and MSSP/SOC management.
• Ability to communicate risk to executives and Board-level stakeholders.

Responsibilities

• Lead and develop a modern cyber security programme across a multi-site, cloud-first enterprise.
• Balance strategic governance with hands-on delivery.
• Present in Board/ExCo risk sessions and translate technical risk to business impact.
• Collaborate with IT, legal, risk and vendors to modernise security operations.

Skills

Cyber security leadership

Security governance

Risk communication

Vendor management

Job description

Up to £75,000–£85,000 (+ car allowance and bonus)

West Midlands (Hybrid)

You’ll be joining a business that’s looking to overhaul their Cyber Sec as part of a major Data/Cyber and AI transformation. You’ll lead, design, and continually improve a modern cyber and information security programme.

This is high-impact and would suit someone who wants to shape the security posture of a complex, multi-site enterprise, not just tick compliance boxes.

You’ll be the type of security leader who can balance strategic governance with hands‑on delivery, translating complex technical risk into clear business impact for senior stakeholders.

The absolute ideal person is comfortable presenting in Board or ExCo risk sessions and diving into security architecture, vendor reviews, or incident response playbooks.

You’ll work cross‑functionally, partnering with IT leadership, legal, risk, and third‑party managed service providers, with the freedom to modernise security operations across a cloud‑first, multi‑site estate. You’ll grow a team and have a real say in how it’s built.

This role will be central to embedding a pragmatic, risk‑based security culture across the organisation.

Key Skills Needed:

• Proven experience in cyber and information security leadership within complex, multi‑site, or cloud‑first environments
• Strong working knowledge of frameworks such as NIST CSF 2.0, ISO 27001, PCI DSS, and UK GDPR
• Hands‑on experience leading cyber incident response and managing third‑party managed security service providers (MSSP/SOC)
• Experience communicating technical risks effectively to executive management and Board‑level stakeholders

Nice to haves:

• Industry certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer
• Background operating within retail, hospitality, leisure, or consumer‑facing sectors with high‑volume card payment environments
• Experience overseeing security for EPOS, cloud infrastructure (Azure/M365), or SAP platforms