Cyber Security Programme Manager

Tenth Revolution Group; City Of London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading consultancy in the security sector is seeking a Cyber Security Programme Manager to oversee a multi-stream cyber security uplift programme. The role entails strategic management of internal and external teams, ensuring compliance with security standards, and driving change management. Candidates should have a strong background in cyber security, particularly within Microsoft Azure, and relevant certifications. The position is hybrid, offering competitive day rates.

Benefits

Competitive day rate

Hybrid working model

Qualifications

• Proven experience delivering large-scale cyber and information security programmes.
• Strong hands-on background in cyber security and technical delivery.
• Deep understanding of Microsoft Azure security architecture and tooling.

Responsibilities

• Lead the end-to-end delivery of a multi-stream cyber security uplift programme.
• Manage the RFP process and selection of third-party vendors and consultancies.
• Deliver initiatives across people, process, technology, and governance.

Skills

Cyber security programme management

Stakeholder engagement

Technical delivery

Vendor management

Education

Relevant certifications (SC-100, CISSP, CISM, ISO 27001 Lead Implementer)

Tools

Microsoft Azure

Microsoft Sentinel

Palo Alto

Fortinet

Job description

Overview

Cyber Security Programme Manager - Contract

Location: London (Hybrid - 3 days onsite at Bishopsgate HQ)

Contract Length: 6 months (with potential extension up to 36 months)

IR35 Status: Outside IR35

Start Date: ASAP

Day Rate: Competitive

We are seeking an experienced and strategic Cyber Security Programme Manager to lead a major enterprise-wide cyber security uplift programme for a leading organisation in the construction industry. This transformation initiative spans 24-36 months and aims to significantly enhance the organisation's security posture across both cloud (Microsoft Azure) and on-premise environments, aligned to the NIST Cybersecurity Framework (CSF) and CIS Controls.

Responsibilities

• Lead the end-to-end delivery of a multi-stream cyber security uplift programme
• Manage the RFP process and selection of third-party vendors and consultancies
• Oversee the external delivery partner, ensuring accountability for risks, issues, and deadlines
• Deliver initiatives across people, process, technology, and governance
• Manage smaller internal cyber security projects outside the partner's scope
• Maintain programme governance, risk management, and resource planning
• Collaborate with senior stakeholders, IT teams, and external suppliers
• Drive change management and embed new security disciplines across the organisation
• Monitor progress against KPIs, including NIST CSF and CIS maturity improvements
• Ensure compliance with internal policies, data protection laws, and industry standards
• Manage programme budgets and ensure value delivery

Technology Environment

Cloud Security (Microsoft Azure):

• Microsoft Sentinel
• Microsoft Defender (Cloud, Endpoint, Office 365)
• Microsoft Entra ID (Azure AD)
• Microsoft Purview
• Microsoft Intune
• Azure Security Centre

Information Security (On-Premise):

• Firewalls (e.g. Palo Alto, Fortinet)
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Endpoint Protection Platforms (EPP)
• SIEM tools (on-prem or hybrid)
• Identity & Access Management (IAM)
• Patch management and vulnerability scanning
• Data Loss Prevention (DLP)

Candidate Profile

• Proven experience delivering large-scale cyber and information security programmes
• Strong hands-on background in cyber security and technical delivery
• Deep understanding of Microsoft Azure security architecture and tooling
• Experience managing third-party vendors and consultancies
• Familiarity with NIST CSF, CIS Controls, and ISO 27001
• Excellent stakeholder engagement and communication skills
• Relevant certifications (e.g. SC-100, CISSP, CISM, ISO 27001 Lead Implementer)