Leeds - Ideally 1-2 times per week but with some flexibility
Company & role
This is an opportunity to join a major organisation operating within a highly regulated environment, where cyber security has real operational weight and visibility.
You will sit within a central cyber function and take ownership of strengthening security operations across detect, respond and recover capabilities. The role blends hands on operational oversight with maturity improvement, stakeholder engagement, partner management and regulatory alignment, so it needs someone who can actually move things forward rather than just admire the dashboard.
Why This Role Stands Out
You will be stepping into a role with genuine scope. This is not just about keeping the lights on in security operations. It is about improving how the organisation detects threats, responds to incidents, strengthens recovery capability and measures overall cyber maturity. There is also a broad remit across security operations, supplier assurance, internal standards, awareness activity and executive level reporting, which gives the role real substance and variety. The environment will suit someone who enjoys building structure, driving better outcomes and working across both technical and business stakeholders.
Key Responsibilities
- Lead day to day cyber security operations and work closely with internal IT teams, security stakeholders and external partners
- Provide oversight of security operations services delivered internally and through third party SOC and MDR providers, ensuring monitoring, detection, response and performance are effective
- Strengthen incident detection and response capability across the business, including playbooks, frameworks, exercises and support during high impact incidents
- Enhance security monitoring, threat hunting and investigation activity using SIEM, EDR, XDR and threat intelligence sources
- Support the maturity of both IT and operational technology detect, respond and recover capabilities
- Act as a trusted advisor to the wider business on cyber risk, security controls and good practice
- Drive supplier cyber assurance activity including due diligence, risk assessments and ongoing third party oversight
- Maintain and improve security standards, control requirements, dashboards and reporting to support better decision making and regulatory compliance
- Support cyber awareness initiatives so staff and leaders are better equipped to recognise and report risks and incidents
Ideal Experience
- Proven experience in a cyber security role with a strong focus on security operations, incident response and cyber resilience
- Strong technical knowledge across modern security operations tooling, with hands on Microsoft Sentinel experience standing out as particularly important
- Experience working with recognised frameworks and guidance such as MITRE ATT@CK and wider knowledge of ISO27001, NIST, NIS or CAF
- Confidence working across internal teams and third party partners, with the ability to hold people to account and drive outcomes
- Ability to translate complex cyber issues into clear actions, priorities and outcomes for a range of stakeholders
- CISSP or CISM certification is expected, with experience in regulated or high assurance environments likely to be a strong advantage
#J-18808-Ljbffr