Cyber Security Specialist

Radius; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Radius partners with a leading global data centre operator to recruit a Security Assurance & Incident Response Lead for its London-based cyber security function. You will oversee security controls across IT, Cloud and OT and lead incident response when required.

You will own the assurance framework, engage with internal teams and external providers, and translate risk into business communication while supporting audits and governance programs.

Qualifications

• Degree in a computer-related subject is required.
• Minimum 5 years in Cyber Security, with ops, IR, GRC roles.
• Experience coordinating cyber security incidents and MSSP/SOC activity.
• Strong knowledge of ISO27001, SOC2, NIST CSF and regulatory standards.
• Proven ability to translate risk into business-focused communication.
• Security governance, incident response methodologies and audits.

Responsibilities

• Maintain and continually improve the Cyber Security Assurance Framework.
• Act as Cyber Incident Lead during significant incidents and coordinate teams.
• Manage MSSP relationships and third-party security providers.
• Lead post-incident reviews and remediation tracking.
• Produce security metrics, KPIs and executive-level reports.
• Develop policies, standards, procedures and incident playbooks.

Skills

Cyber security

Incident response

GRC

Security operations

Vulnerability management

Threat analysis

ISO 27001

SOC 2

NIST CSF

NIST 800-61

GDPR

NIS2

Zero Trust

EDR

SIEM

IAM

PAM

Encryption

Network security

Security architecture

Regulatory compliance

Risk management

Stakeholder engagement

Workshop facilitation

Executive communication

Education

Bachelor's degree in Computer-related subject

Job description

Radius is partnering with a leading global data centre operator to recruit a Security Assurance & Incident Response Lead for its London-based cyber security function.

Reporting to the Senior Cyber Security Manager, you’ll provide independent oversight of security controls across the IT, Cloud and OT environments. You’ll own the security assurance framework, and you’ll step in as Cyber Incident Lead when significant incidents happen. You’ll also be the main link between internal teams, MSSPs, third-party security providers, sister companies across the wider group, and senior management.

The role is mainly focused on assurance, governance and incident leadership. You’ll still need enough technical depth to support investigations, threat analysis and major incidents when they come up.

Key responsibilities

• Maintain and continually improve the Cyber Security Assurance Framework
• Develop and maintain cyber security policies, standards, procedures and incident response playbooks
• Ensure alignment with ISO 27001, SOC2, NIST CSF, NIST 800-61, GDPR, NIS2 and Cyber Essentials
• Act as Cyber Incident Lead during significant incidents, coordinating internal teams, MSSPs, suppliers and business stakeholders
• Lead post-incident reviews, root cause analysis and lessons-learned workshops, and oversee the remediation that follows
• Review alerts, incident trends and threat activity to assess how effective monitoring is
• Oversee vulnerability management and track risks, findings, exceptions and remediation through to closure
• Manage day-to-day assurance of MSSPs and security suppliers, including performance monitoring and security reviews
• Coordinate penetration testing, security assessments, tabletop and cyber crisis exercises
• Support internal and external audits, coordinating evidence gathering
• Produce security metrics, KPIs and management reports, and translate technical risk into business-focused communication
• Build strong relationships across IT, Legal, Compliance, Risk, HR and external partners
• Support the wider cyber programme across SOC, IR, security engineering, vulnerability management, pen testing and GRC
• Degree (or equivalent) in a computer-related subject
• Minimum 5 years’ experience in Cyber Security, within Security Operations, Incident Response, Security Assurance or GRC
• Experience coordinating cyber security incidents
• Experience managing or overseeing MSSP or SOC activity and third-party suppliers
• Knowledge of EDR, SIEM, NDR, security architecture, IAM, PAM, encryption, network security, Zero Trust and secure interconnection patterns
• Strong understanding of ISO 27001, SOC2, NIST CSF, incident response methodologies, cyber governance, GDPR and regulatory compliance
• Experience managing remediation activities and risk treatment plans
• Strong report writing and stakeholder engagement skills
• One or more of: CISSP, CISM, CRISC
• Experience in critical infrastructure, telecommunications, data centre or other regulated environments
• Knowledge of Microsoft Security, CrowdStrike or equivalent platforms
• Knowledge of OT and AI security
• Experience supporting certification, audit and compliance programmes
• GCIH, GCFA or Security+
• Experience presenting to executive leadership and running workshops or tabletop exercises

About you

You’re analytical, organised and credible. You can communicate clearly with technical and non-technical audiences, challenge constructively, and manage several priorities without losing grip on the detail.