Senior Cyber Security Engineer

The Money and Pensions Service; Bedford; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A prominent public service organization is seeking a Cyber Security Lead in Bedford to manage security lifecycle initiatives across complex environments. The role involves collaboration with third-party providers, ensuring compliance with cyber standards, and leading security governance activities. Candidates should have a strong background in cloud security, proven leadership experience, and relevant certifications. This position offers hybrid working arrangements with a focus on protecting digital financial services.

Benefits

30 days annual leave plus Bank Holidays

Pension scheme with matched contributions

Employee assistance programme

Qualifications

• Minimum of 8 years of experience in technical and security consulting roles.
• Experience with security frameworks and standards is necessary.
• Professional certifications such as CISSP, CISM, CCSP are preferred.

Responsibilities

• Oversee the full security lifecycle across complex hybrid environments.
• Ensure systems and networks are proactively monitored for security events.
• Lead security assurance activities including penetration tests.

Skills

Cloud security technologies (AWS, Azure)

Analytical skills

Problem-solving

Communication skills

Education

Bachelor’s degree in computer science or related field

Tools

Security frameworks (NIST, ISO 27001)

Firewall technologies

SIEM technologies

Job description

Overview

Are you a strategic cybersecurity leader ready to make a meaningful impact on the future of digital financial services? The Money and Pensions Service (MaPS), supporting the delivery of the Pensions Dashboard Programme (PDP), is looking for a Cyber Security Lead to join our team. This is a critical leadership role overseeing the full security lifecycle – from architecture and policy development to operational resilience and incident response – across complex hybrid environments with a strong emphasis on cloud security (AWS and Azure). The role includes oversight of third-party security providers and suppliers to ensure outsourced services meet contractual, technical, and regulatory expectations while delivering value for public money. The Cyber Security Lead reports to the Head of Information Security and helps safeguard the PDP within MaPS and the UK’s next-generation financial ecosystem.

Responsibilities

• Work in close partnership with third-party security and service providers to ensure systems and networks are proactively monitored, security events detected and triaged, and incidents responded to based on severity and business impact.
• Lead the design, assurance, and continuous improvement of security systems and tooling, aligning with national cyber standards and best practices (e.g. NCSC, ISO 27001, NIST).
• Collaborate with architects, risk owners, and delivery teams to embed secure design principles and ensure the SOC is equipped to handle emerging threats.
• Lead security assurance activities including penetration tests, technical risk assessments, assurance reviews, and third-party security evaluations to ensure alignment with standards.
• Chair PDP security governance and technical authority forums to ensure pension providers and schemes connect securely and compliantly.
• Represent security within change boards and design authorities and ensure that security non-functional requirements (NFRs) are defined, prioritised, and tracked within delivery.
• Maintain compliance with national cybersecurity standards, regulatory expectations, and internal frameworks by authoring, updating, and enforcing the PDP Code of Connection (CoCo) security requirements for participants to connect to the ecosystem.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• Minimum of 8 years of experience in technical and security consulting roles.
• Strong knowledge of cloud security technologies (AWS, Azure) and IAM concepts; experience with EntraID and related tools is desirable.
• Experience with security frameworks and standards (NIST, ISO 27001, CyberEssentials Plus, CIS).
• Solid understanding of networking, operating systems, and security technologies (firewalls, IDS/IPS, SIEM).
• Excellent analytical, problem-solving, and communication skills; able to work independently and in teams.
• Professional certifications such as CISSP, CISM, CCSP, or platform-specific credentials (e.g., AWS Certified Security – Specialty, Azure Security Engineer).
• Experience with secure system design and implementation across on-premises and cloud environments; familiarity with secure SDLC/DevSecOps and NFR integration.

Travel, Location and Working Pattern

Please note there will be frequent travel to London. The Money and Pensions Service (MaPS) is based in Bedford with hybrid working arrangements; the headquarters in Bedford is the contractual place of work.

Application Process

1. Initial Review: Our recruiter will review your CV. If it looks like a good fit, they’ll reach out to arrange a call.
2. Hiring Manager Review: If suitable, your CV will be passed to the hiring manager for interview consideration.
3. Interview: If selected, you’ll participate in a virtual interview (competency-based questions).

What We Offer

• Generous annual leave: 30 days plus Bank Holidays
• Pension scheme with contributions matched 2 to 1 (up to 10% of salary)
• Cycle to work, season ticket loans, eye tests, flu jabs, life assurance
• Employee assistance programme and wellbeing schemes
• Flexible, hybrid working with a minimum of 2 days in the office per week

Equality, Diversity and Inclusion

At MaPS, we value an inclusive working environment and actively seek applicants from diverse backgrounds who align with our values: Caring, Connecting, Transforming. We are committed to inclusion, equity, and belonging and encourage applicants to bring their whole selves to work.