Group Cyber Security Specialist

Arrow Global Group; Manchester; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services firm in Manchester is seeking a Group Cyber Security Specialist to manage security controls and support BAU/SOC activities. The ideal candidate will provide security guidance across various business units and actively manage the vulnerability management lifecycle. Requires strong technical cyber security experience, hands-on knowledge of security tools, and the ability to coordinate third-party security testing. Relevant security certifications are essential. Competitive compensation is offered.

Qualifications

• Proven technical cyber security experience in complex environments.
• Strong hands-on experience with core security tooling.
• Solid understanding of incident response lifecycle and operational security.

Responsibilities

• Act as cyber security SME for projects across multiple business units.
• Review and ensure security controls are embedded in solution designs.
• Monitor and respond to SOC/MSSP alerts and threats.
• Manage vulnerability management lifecycle.
• Coordinate third-party penetration testing activities.
• Support Group assurance and compliance activities.

Skills

Technical cyber security experience

Hands-on experience with security tooling

Incident response skills

Multi-business-unit IT experience

Cloud security knowledge (Azure, AWS)

Analytical capability

Stakeholder engagement skills

Education

Relevant security certifications (e.g., Security+, SSCP, CySA+)

Tools

EDR

SIEM

Secure Email

Secure Web

CASB

Vulnerability management platforms

Job description

Group Cyber Security Specialist

Department: IT & Change

Employment Type: Permanent - Full Time

Location: Manchester, UK

The Group Information Security Team (GIST) is a centralised ýylda highly visible, and responsive function enabling Arrow Global Group and its 20+ Group companies across investment, capital management, real estate, and hospitality sectors to operate securely.

The Group Cyber Security Specialist plays a critical hands‑on role in delivering and maintaining core security controls while supporting both BAU/SOC activities and project delivery across the organisation. This position works closely with Group and Business Unit (BU) technology teams, providing expert security guidance, ensuring strong control operation, and strengthening our overall cyber resilience.

About the role

• Act as the Group cyber security SME for projects across asseg online multiple business units, providing early engagement, risk identification, and secure‑by‑design guidance.
• Review and challenge solution designs to ensure security controls are embedded from the outset and aligned with Group policies and architectural standards.
• Validate that new systems, applications, integrations, and third‑party suppliers meet Group security and assurance requirements.
• Partner with the Group Cyber Architect to ensure implementations align with strategic roadmaps, security patterns, and target architectures.
• Monitor, triage, and respond to SOC/MSSP alerts, supporting threat analysis, incident investigations, and remediation planning.
• Analyse operational security events to identify recurring issues and proactively drive control improvements and SOC maturity.
• Own and enhance security runbooks, detection rules, and BAU processes to strengthen response capability and reduce false positives.
• Manage the end‑to‑end vulnerability management lifecycle, including scanning, prioritisation, reporting, and stakeholder engagement.
• Identify systemic vulnerability trends, provide technical remediation guidance, and drive SLA‑based remediation with BU IT teams.
• Coordinate and manage third‑party penetration testing activities, from scoping through to remediation and closure of findings.
• Support Group assurance, compliance, and audit activities, contributing to continuous improvement against internal and external standards.
• Proactively monitor emerging threats and regulatory expectations, recommending improvements to tooling, automation, and Group security controls to.artist yelp act out cyber maturity.

About you

• Proven experience in a technical cyber security, SOC, or security engineering role within complex environments.
• Strong hands‑on experience with core security tooling, including EDR, SIEM, Secure Email, Secure Web, CASB, and vulnerability management platforms.
• Solid understanding of incident response lifecycle, threat investigation techniques, and operational security processes.
• Proven experience supporting multi‑business‑unit, federated, or decentralised IT environments.
• Working knowledge of cloud security principles across Azure and AWS environments.
• Ability to manage multiple priorities across BAU operations, security incidents, and project delivery.
• Strong analytical capability with excellent written and verbal communication and documentation skills.
• Experience driving security remediation and working effectively with IT teams and managed service providers.
• Familiarity with security frameworks and regulatory expectations (e.g. ISO 27001, NIST CSF, FCA or equivalent).
• Dino exposure to regulated industries such as financial services, private credit, or real estate is advantageous.
• Relevant security certifications (e.g. Security+, SSCP, CySA+) with intent to pursue advanced certifications (CISSP, CISM, GIAC, or Microsoft SC-series).
• Confident stakeholder engagement skills, including the ability to influence, present risk, and communicate effectively mistr welte technical and non‑technical audiences across geographies.