About this role
Salary: £50,000 - 67,000 per year
Requirements: Cyber security leadership or management experience within a public sector, regulated, or complex enterprise environment.Knowledge of NCSC-aligned security principles and practical governance and assurance approaches.Experience with security compliance and audit-readiness, including frameworks such as PSN, PCI-DSS, GDPR, Cyber Essentials Plus, and similar.Experience with Microsoft security tooling such as Sentinel, Defender, and Microsoft 365 E5 security capabilities; exposure to Copilot for Security is beneficial.Experience operating within structured service environments such as ITIL and change governance.ISO 27001-aligned policy and control design and implementation experience is desirable.Ability to support out-of-hours response activity when required, including security incidents.Some travel may be required. Responsibilities: We own and lead our organisations cyber security strategy, policies, standards, and operating model.We embed security by design within technology change governance, including active participation in the Change Advisory Board and leadership of an Information Security governance forum.We oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration.We manage cyber security across cloud and hybrid environments, including Microsoft 365 and Azure, with oversight of patching assurance, disaster recovery, and business continuity testing.We lead vulnerability management and security testing activity, including internal scanning, external testing, remediation tracking, and evidence gathering.We manage and coordinate incident response, investigation, reporting, and post-incident improvement actions.We maintain compliance and evidence for key standards and frameworks, including PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit, and wider public sector assurance requirements.We drive security awareness and practical adoption of secure ways of working across the business.We manage supplier performance and outsourced security services to ensure controls are effective and audit-ready.We line manage and develop staff, and manage a small security budget. Technologies: AzureCloudCopilotICTSupportITILMicrosoft 365SecurityOffice 365 More:
We are supporting a Local Authority in the search for a Cyber Security Lead to provide cyber security strategy, governance, and operational resilience for a large public sector organisation. This is a hands-on leadership role based on a hybrid working model with three days on-site in London and two days working from home, offering a salary of £50,000 to £67,000. You will work closely with senior ICT stakeholders, service providers, and internal teams to protect critical ICT infrastructure and sensitive data, ensure compliance with national standards, embed security by design, maintain assurance, drive continuous improvement, and lead incident response when required.
last updated 31 week of 2026