Information & Cyber Security Manager - SC Cleared - Inside IR35

SR2; City Of London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading technology service provider is seeking an Information & Cyber Security Manager to lead operational security for a national technology transformation programme. The role involves managing day-to-day security operations, collaborating with external suppliers, and providing expert advice on security risks. The ideal candidate will have experience in a complex, multi-supplier environment and hold active SC clearance. This position offers a hybrid work model with responsibilities critical to the success of security operations across the UK public sector.

Qualifications

• Proven experience in leading security operations.
• Active SC clearance is a prerequisite.
• Expertise in managing external security service providers.

Responsibilities

• Lead day-to-day security operations for the ESN solution.
• Support ongoing security operations activities with suppliers.
• Work with SI partners to develop a comprehensive security operations centre.
• Act as primary contact for operational security issues within ESMCP.
• Maintain security operational procedures and reporting mechanisms.
• Deliver strategic security objectives and continual improvements.

Skills

Incident response planning

Vulnerability assessment

Threat monitoring

Operational security leadership

Stakeholder management

Job description

Information & Cyber Security Manager

Inside IR35: 500 - 550 per day. Hybrid: 2 days per week on site in London. Active SC is a prerequisite.

We are supporting a large-scale national technology transformation programme delivering a secure, resilient communications and data platform used across the UK public sector. This role sits within the Security Operations pillar, providing senior operational leadership and acting as a key interface between the programme, delivery partners, and outsourced security service providers.

This is not a traditional in-house SOC role. The programme operates a hybrid SOC model, where monitoring and core SOC services are delivered by external suppliers under contract. The internal security function is responsible for setting policy, direction, assurance, and defining outcomes, while suppliers execute day-to-day monitoring and response activities. The role is critical in supporting the mobilisation and maturation of the SOC capability, addressing challenges in standing up and operationalising the function within a complex, multi-supplier environment.

Key Responsibilities

• Lead and manage day-to-day security operations for the delivery of the ESN solution. This will include incident response planning, vulnerability assessment and planning for the target architecture, and threat monitoring.
• Support the on-going security operations activities, work with various suppliers in ensuring deliverables align with contracts.
• Work with systems integration (SI) partners to build out an end-to-end security operations centre.
• Lead and participate in various security forums.
• Act as the primary point of contact for operational security matters within ESMCP, liaising with suppliers, stakeholders, and wider security teams.
• Work with SI partners to review and maintain security operational procedures, playbooks, and reporting mechanisms.
• Support the Head of Security Operations in delivering strategic security objectives and continuous improvement initiatives.
• Provide expert advice on security risks, mitigations, and incident handling to senior leadership and programme teams.
• Lead security investigations and coordinate with wider teams including emergency services or government agencies when required.