Job Description:

Location: Aberdeen or Sheffield (Hybrid)

Our client, a growing engineering and technology group, is looking for an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. This is a high-impact, Group-wide role covering corporate IT, Operational Technology (OT), cloud environments and commercial software products, giving you real scope to shape strategy and make a visible difference.

The role

• Develop and own the Group cyber security roadmap alongside the CIO and IT leadership, covering IT, OT, cloud and digital products.
• Define and maintain cyber policies, standards and governance, including the cyber risk register, risk assessments and reporting to senior stakeholders.
• Lead incident response planning with an external SOC partner, including playbooks, tabletop exercises and post-incident reviews.
• Provide security governance across IT and OT environments, improving asset visibility, segmentation, secure remote access and vulnerability management without compromising safety or availability.
• Work with Software and Firmware Engineering teams to embed security throughout the SDLC and review the security architecture of customer-facing products.
• Oversee compliance with frameworks such as ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443, and coordinate internal and external audits.
• Lead supplier due diligence and support customer security questionnaires, tenders and assurance requests.

What you’ll bring

• Significant experience in a cyber security governance, assurance or leadership role.
• Experience managing ISO 27001 or an equivalent ISMS.
• Strong understanding of enterprise security architecture, secure software development and cloud security (ideally Microsoft Azure).
• Knowledge of OT / Industrial Control System security.
• Strong risk management skills and the ability to explain complex technical risks clearly to technical and non-technical audiences.

Desirable

• Experience in the energy, industrial or engineering sectors.
• Experience with Cyber Essentials Plus, SOC 2, IEC 62443 or NIS2.
• Certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.

If you want to shape cyber security across enterprise, industrial and product environments in a collaborative, Group-wide role, apply now for more information.