Cyber Security Project Manager

Dunelm; Leicester; Hybrid; GBP 55,000 - 90,000; Full time

Job summary

Dunelm in Leicester is seeking a Cyber Security Project Manager to turn priorities into well‑defined delivery plans. You’ll coordinate cross‑functional teams, manage risks and keep stakeholders informed, with 1–2 days in the office weekly in Leicester.

You’ll work with the Cyber Programme Manager, Information Security, Technology and external partners to deliver security, identity, audit and resilience projects. A practical, delivery‑focused mindset is essential.

Qualifications

• Experience delivering cross-functional technology, cyber security or resilience projects.
• Strong planning and governance skills with clear milestones and dependencies.
• Ability to coordinate technical teams, stakeholders and third-party partners.

Responsibilities

• Lead cyber security projects from definition through delivery and handover.
• Establish governance and reporting with concise leadership updates.
• Coordinate collaboration across Cyber, Platform Ops, Product, Engineering and external partners.
• Support transition of outcomes into sustainable operations and controls.

Skills

Cyber security

Project management

Governance

Risk management

Stakeholder management

Agile methods

Job description

Home. There’s no place like it.

And there’s no feeling like helping people create the joy of feeling truly at home. At Dunelm, that’s what we do. We’re the UK's number one choice for homewares because we make home life lovelier for our customers. And we’ve crafted a workplace that feels just as welcoming – where you can bring your ideas, be yourself, and feel right at home.

Work your way, together

We’re a hybrid business, which means you’ll have flexibility alongside time together with your team. In this role, you can expect 1-2 days per week in our Leicester office, helping you stay connected, collaborate and do your best work for our customers.

This role will help turn Dunelm’s cyber priorities into clear, well-managed delivery, coordinating people, plans, partners and decisions across a changing security landscape.

You will work with the Cyber Programme Manager, Information Security teams, Technology colleagues, business stakeholders and external partners to deliver assigned Cyber Security, Identity, Audit and Resilience projects.

You will bring structure without unnecessary bureaucracy, making scope, milestones, ownership, risks and decisions clear while helping technical teams focus on delivery. You do not need to be the deepest technical expert in the room, but you will need to be cyber awareness and curiosity to ask good questions, understand risk and bring the right people together.

What you’ll be doing

Project delivery and planning

• Lead assigned cyber security projects and workstreams from definition through delivery, adoption and handover into business as usual.
• Turn agreed outcomes into practical plans with clear scope, milestones, owners, dependencies, decision points and delivery dates.
• Maintain proportionate project controls covering risks, issues, assumptions, dependencies, actions, decisions and change.
• Create a clear, evidence-based view of delivery confidence and create material risks early with options and recommendations.

Governance, audit and reporting

• Establish fit-for-purpose governance and reporting that supports timely decisions without creating unnecessary administration.
• Coordinate delivery against regulatory, audit and control commitments, making sure scope, evidence, ownership and closure criteria are understood.
• Prepare concise updates for leadership, risk, audit and programme forums, tailored to the audience and decision required.
• Support transition of project outcomes into sustainable operational ownership, controls and ways of working.

Collaboration and delivery leadership

• Bring together Cyber, Platform Operations, Product, Engineering, Architecture, Service Management, business teams and external partners around shared outcomes.
• Facilitate workshops and working sessions that clarify problems, resolve blockers and create accountable next steps.
• Help teams prioritise delivery within competing operational and project demands, while protecting time for critical commitments.
• Build trusted relationships and create an environment where risks and uncertainty can be raised early and handled constructively.

Partner and commercial delivery

• Coordinate third-party delivery against agreed scope, milestones, quality, security and service expectations.
• Support statements of work, onboarding, delivery reviews and supplier governance in partnership with Commercial, Legal and senior stakeholders.
• Ensure external dependencies, commitments and risks are visible and actively managed.

Continuous improvement

• Improve project ways of working through feedback, retrospectives and practical use of data, automation and collaboration tools.
• Reuse simple, effective delivery patterns across projects while adapting governance to the scale and risk of the work.

What we’ll look for in you

Essential experience and skills

• Experience delivering cross-functional technology, cyber security, risk, compliance or operational resilience projects.
• Strong project planning, governance, RAID and dependency-management skills, with the ability to create clarity from incomplete or changing information.
• Experience coordinating technical teams, business stakeholders and third-party partners to deliver agreed outcomes.
• Clear, concise communication skills and confidence working with senior stakeholders, specialists and delivery teams.
• Ability to translate risk, audit or control requirements into practical delivery plans and evidence-based status reporting.
• Good commercial awareness, including management of scope, resource, suppliers, timelines and delivery trade-offs.
• Working knowledge of Agile and traditional project-delivery approaches, with judgement to use proportionate methods.

Desirable skills

• Experience delivering identity and access management, security operations, cyber resilience, audit remediation or governance projects.
• Familiarity with common cyber and risk concepts such as access control, privileged access, security monitoring, incident response, third-party risk and disaster recovery.
• Experience working in a regulated, retail or multi-site organisation.
• Experience supporting supplier selection, onboarding or managed-service transition.
• Relevant project-management or cyber security qualification.
• Awareness and delivery of NIST Maturity, Cyber Essentials, PCI DSS, ISO 27001, Provision 29 would be an advantage.

Behaviours

• Calm, pragmatic and organised, with a focus on outcomes rather than process for its own sake.
• Curious and willing to challenge constructively when scope, ownership or evidence is unclear.
• Takes responsibility, follows through on commitments and helps others do the same.
• Builds trust through transparency, inclusive collaboration and early escalation of risks.
• Comfortable operating in ambiguity while creating a credible route forward.