ISO 27001 Security Strategy Lead (Remote UK)

Cedar Recruitment; United Kingdom; Hybrid; GBP 63,000 - 77,000; Full time

Benefits offered by this job

Bonus scheme (20%)

Pension plan

Travel expensed

Job summary

Cedar Recruitment is seeking a Cyber Security Manager to own the security roadmap in a UK-remote role with one office day every fortnight.

You will set standards for suppliers, lead ISO 27001 readiness, and work with Risk, Compliance and Technology Operations to prioritise gaps and verify fixes.

The role requires regulated sector experience and the ability to challenge MSP performance while communicating risks clearly to non-technical colleagues.

Qualifications

• Experience in FCA-regulated financial services or similarly regulated environments.
• Track record of holding an MSP to account for security outcomes.
• Practical experience with ISO 27001; certification readiness is valuable.

Responsibilities

• Cyber security strategy and assurance: set priorities, track remediation, explain cyber risks to senior stakeholders.
• MSP security performance: challenge service reporting, follow up on vulnerabilities and penetration test findings, verify evidence.
• Microsoft security oversight: guide MSP on Defender and Intune coverage, including endpoint monitoring.
• ISO 27001 readiness: identify control gaps, set remediation priorities, gather evidence for certification.
• Security awareness: roll out KnowBe4 training and phishing simulations, track results and target follow-ups.

Skills

Cyber security strategy

Vendor management

ISO 27001

Security governance

Risk communication

Job description

Cedar Recruitment is seeking a Cyber Security Manager to own the security roadmap in a UK-remote role with one office day every fortnight.

You will set standards for suppliers, lead ISO 27001 readiness, and work with Risk, Compliance and Technology Operations to prioritise gaps and verify fixes.

The role requires regulated sector experience and the ability to challenge MSP performance while communicating risks clearly to non-technical colleagues.