Cybersecurity Manager II - Secure Cloud & DevSecOps Lead

McKinsey & Company; Greater London; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Competitive compensation

Professional development

Job summary

McKinsey & Company in London invites a cybersecurity leader to join as a digital risk lead embedded with product, data, and engineering. You will ensure secure-by-design principles across assets and client deployments.

You will embed security controls into AWS/Azure/GCP pipelines, support secure SDLC and DevSecOps, and conduct threat modeling and design reviews while guiding governance and client-facing delivery teams.

Qualifications

• 6+ years of cybersecurity experience relevant to digital product engineering, cloud workloads, or security architecture.
• Experience with securing cloud solutions (AWS/Azure/GCP) including IAM, networking, containers, and Kubernetes.
• Hands-on with DevSecOps toolchains (SAST/DAST, scanning, IaC security).
• Experience in threat modeling, secure design reviews, and engineering risk assessments.
• Familiarity with ISO 27001, SOC 2, OWASP, NIST CSF standards.
• Knowledge of GDPR/CCPA privacy regulations; relevant certifications preferred.

Responsibilities

• Embed cybersecurity controls into product, data, and engineering ecosystems.
• Support secure SDLC and DevSecOps practices across cloud environments.
• Conduct security reviews, threat modeling, and design governance.
• Collaborate with client service teams to define compliant data-handling workflows.

Skills

Cybersecurity experience

Cloud security

DevSecOps tooling

Threat modeling

Security standards

Data privacy

Certifications

Communication

Education

Bachelor’s or Master’s in Cybersecurity / CS / Engineering

Tools

SAST tools

DAST tools

Container image scanning

IaC security tooling

Job description

McKinsey & Company in London invites a cybersecurity leader to join as a digital risk lead embedded with product, data, and engineering. You will ensure secure-by-design principles across assets and client deployments.

You will embed security controls into AWS/Azure/GCP pipelines, support secure SDLC and DevSecOps, and conduct threat modeling and design reviews while guiding governance and client-facing delivery teams.