Security Engineering Manager - Workplace Technology

Tesco; Welwyn Garden City; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Annual bonus

25 days holiday + personal day

Private medical insurance

Maternity & Adoption leave (26 weeks)

Paternity leave

24/7 virtual GP

Employee Assistance Programme

Job summary

Tesco in Welwyn Garden City is seeking a Security Engineering Manager to lead a team of five engineers securing workplace technology platforms such as M365, DLP, email security, AD, and endpoint hardening. You will guide delivery of the Platform Security roadmap, balance daily operational work with long-term security improvements, and foster an inclusive, engineering-led culture across platforms.

This role offers an annual bonus, generous leave, private medical insurance, and flexible working

Qualifications

• Leadership experience managing technical teams with coaching and performance development.
• Strong knowledge of common enterprise workplace technologies.
• Experience defining and executing strategic roadmaps for security programs.
• Ability to communicate complex cyber risks to both technical and non-technical stakeholders.
• Experience embracing and enabling change while maintaining service continuity.
• Foundational understanding of how AI and automation can aid cybersecurity.

Responsibilities

• Deliver the Platform Security roadmap with new capabilities and operating models.
• Ensure Platform Security Engineering operates with high performance and measurable outcomes.
• Lead, mentor and grow a diverse team of security professionals.
• Serve as senior interface between Platform Security, Technology and Business stakeholders.
• Embed a product/service mindset ensuring changes are outcome-driven.

Skills

Leadership

Tech Knowledge

Strategy & Planning

Communication

Change Leadership

AI Awareness

Talent Interviewing

Collaboration

Job description

About the role

The Security Engineering Manager – Workplace Technology is responsible for leading a team of 5 security engineers who secure and enhance workplace technology platforms. This includes technologies such as Microsoft 365, Data Loss Prevention (DLP), email security, Windows and Mac client hardening, Active Directory, etc. The role ensures that security engineering practices align with organisational priorities while maintaining a strong operational posture across all supported platforms.

The manager provides leadership, guidance, and development opportunities to the team, setting clear objectives aligned with the Tesco’s security strategy. They are accountable for ensuring high quality delivery, balancing day to day operational demands with longer term security improvements. This includes overseeing workload distribution, ensuring the team is focused on the highest priority risks and initiatives, and maintaining a strong engineering culture.

You will be responsible for

• Transformation & Change: Deliver the Platform Security roadmap, ensuring new capabilities (process, tooling, AI, and operating models) are effectively scoped, implemented, and embedded without compromising operational performance.
• Drive Operational Excellence: Ensure Platform Security Engineering operates at high performance, maintaining strong prevention capability, service reliability, and measurable outcomes aligned to business risk.
• Develop High Performing Teams: Lead, mentor, and grow a diverse team of security professionals, fostering a culture of inclusion, continuous learning, and engineering-led ways of working.
• Strengthen Stakeholder Engagement: Act as a senior interface between Platform Security, Technology, and Business stakeholders, clearly communicating risk, influencing outcomes, and aligning priorities.
• Own Service & Product Mindset: Embed a product and service-oriented approach ensuring changes are outcome driven, measurable, and aligned to customer and organisational needs.

You will need

Essential

• Leadership & Team Development: Demonstrable experience leading and managing technical teams, including coaching, performance development, and building inclusive, high-performing environments.
• Strong Technical Knowledge: Demonstrable knowledge of common enterprise workplace technologies.
• Strategic Thinking & Problem Solving: Proven ability to define and execute strategic roadmaps, translating complex challenges into clear, actionable plans aligned to business objectives.
• Communication & Influencing: Strong capability to communicate complex cyber risks effectively to both technical and non-technical stakeholders, influencing decisions at senior levels.
• Change Leadership: Experience embracing and enabling change, successfully integrating new tools, processes, and operating models whilst maintaining service continuity.
• Applied AI Awareness: Foundational understanding of how AI and automation can be applied to cyber security particularly in improving efficiency and decision making.
• Technical Interviewing & Talent Building: Experience in hiring and assessing technical talent, building teams that meet both current and future capability needs.
• Collaboration & Inclusion: Demonstrable commitment to fostering inclusive teams and working effectively across diverse technology and security domains.

Desirable

• Awareness of core technology landscape and retail systems, and how cyber risk translates into customer and business impact.
• Understanding of cyber incident management models and escalation frameworks across enterprise environments.
• Experience with product methodologies and service-oriented delivery models.
• Exposure to data analytics and insights to drive operational decision making and performance improvement.
• Experience managing budgets, vendors, or procurement processes within a technical environment.
• Demonstrated curiosity, learning mindset, and contribution to professional communities.
• Awareness of responsible AI governance principles and how they apply to operational environments.
• Familiarity with engineering and development lifecycle concepts to better align security with technology delivery.
• GIAC certification and or relevant certifications such as CISSP or CISM.

Whats in it for you

• Annual bonus scheme of up to 20% of base salary.
• Holiday starting at 25 days plus a personal day (plus Bank holidays).
• Private medical insurance.
• 26 weeks maternity and adoption leave (12 months service required at the qualifying date) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave.
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing.

The above information is a shortened summary, refer to our policies for full details

About Us

You might know us as a supermarket, technology company or even for our award-winning mobile network. Truth is, we’re all of those things, and much more. Our colleagues work with one goal in mind, helping to make every day a little better for our customers, colleagues and communities all over the world. No two customers are the same, neither are our colleagues.

At Tesco, we champion a balance that lets you thrive both in and out of work. Spend 60% of your week collaborating with colleagues at our office locations or local sites and the rest remotely. Whether you're just kicking off your career, juggling passions, or navigating big life events, we're here to support you. We always welcome a conversation about flexible working, so talk to us throughout your application about how we can support.

We’re proud to be an accredited Disability Confident Leader, where everyone’s welcome. That’s why we commit to providing a fully inclusive and accessible recruitment process. If you need support with your application, and if you’re interested in joining our team but don’t tick every box, don’t let that hold you back from applying.