Cyber Security Manager | Shape the roadmap & make a difference

Cedar Recruitment; United Kingdom; Híbrido; GBP 63.000 - 77.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Bonus scheme (20%)

Pension plan

Travel expensed

Descripción de la vacante

Cedar Recruitment is seeking a Cyber Security Manager to own the security roadmap in a UK-remote role with one office day every fortnight.

You will set standards for suppliers, lead ISO 27001 readiness, and work with Risk, Compliance and Technology Operations to prioritise gaps and verify fixes.

The role requires regulated sector experience and the ability to challenge MSP performance while communicating risks clearly to non-technical colleagues.

Formación

• Experience in FCA-regulated financial services or similarly regulated environments.
• Track record of holding an MSP to account for security outcomes.
• Practical experience with ISO 27001; certification readiness is valuable.

Responsabilidades

• Cyber security strategy and assurance: set priorities, track remediation, explain cyber risks to senior stakeholders.
• MSP security performance: challenge service reporting, follow up on vulnerabilities and penetration test findings, verify evidence.
• Microsoft security oversight: guide MSP on Defender and Intune coverage, including endpoint monitoring.
• ISO 27001 readiness: identify control gaps, set remediation priorities, gather evidence for certification.
• Security awareness: roll out KnowBe4 training and phishing simulations, track results and target follow-ups.

Conocimientos

Cyber security strategy

Vendor management

ISO 27001

Security governance

Risk communication

Descripción del empleo

Cyber Security Manager

Up to £70,000 base + 20% bonus + up to 15% pension
Permanent | UK remote | One office day per fortnight, with travel fully expensed

Take ownership of the cyber security roadmap, set the standards your security suppliers are expected to meet and lead the work towards ISO 27001 certification.

Reporting to the Head of Data & Technology, you’ll work with Risk, Compliance and Technology Operations to decide which security gaps to tackle first and make sure they’re resolved. The managed service provider (MSP) handles technical delivery. You’ll set expectations, challenge performance and verify that fixes work.

What you’ll own

• Cyber security strategy and assurance. Set priorities, track remediation and explain cyber risks and decisions to senior stakeholders.

• MSP security performance. Challenge service reporting, follow up on vulnerabilities and penetration test findings, and verify the evidence before closing actions.

• Microsoft security oversight. Guide the MSP on good practice for Microsoft Defender and Intune, including endpoint coverage and monitoring.

• ISO 27001 readiness. Identify control gaps, agree remediation priorities and build the evidence needed for certification.

• Security awareness. Roll out KnowBe4 training and phishing simulations, track results and use them to target follow-up.

What you’ll bring

• Cyber or information security experience in FCA-regulated financial services or a similarly regulated environment.

• A track record of holding an MSP, managed security provider or outsourced SOC to account for security outcomes.

• Practical experience with ISO 27001. Taking an organisation through certification would be particularly valuable.

• The technical judgement to challenge suppliers and the communication skills to explain security risks clearly to colleagues outside technology.