Job Description:

Hybrid: 3 days on-site (London) + 2 days working from home
Salary: £50,000-£67,000

Panoramic Associates are supporting a Local Authority in their search for a Cyber Security Lead to lead cyber security strategy, governance and operational resilience for a large public sector organisation. You’ll protect critical ICT infrastructure and sensitive data, ensure compliance with national standards, and embed “security by design” across technology change and service delivery.

This is a hands-on leadership role, working closely with senior ICT stakeholders, service providers and internal teams to maintain assurance, drive continuous improvement, and lead incident response when required.

• Own and lead the organisation’s cyber security strategy, policies, standards and operating model.
• Embed security-by-design within technology change governance, including active participation in Change Advisory Board (CAB) and leadership of an Information Security governance forum.
• Oversee security operations and technical controls across SIEM, firewalls, endpoint protection, identity and access management, and secure configuration.
• Manage cyber security across cloud and hybrid environments (Microsoft 365 / Azure), including patching assurance, disaster recovery and business continuity testing.
• Lead vulnerability management and security testing activity (internal scanning, external testing, remediation tracking, evidence gathering).
• Manage and coordinate incident response, investigation, reporting and post-incident improvement actions.
• Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements.
• Drive security awareness and practical adoption of secure ways of working across the business.
• Manage supplier performance and outsourced security services to ensure controls are effective and audit-ready.
• Line manage and develop staff, and manage a small security budget.

• Cyber security leadership/management experience within a public sector, regulated, or complex enterprise environment.
• Knowledge of NCSC-aligned security principles and practical governance/assurance approaches.
• Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks).
• Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot for Security is beneficial.
• Experience operating within structured service environments (e.g., ITIL) and change governance.

• ISO 27001-aligned policy/control design and implementation experience.

• Ability to support out-of-hours response activity when required (e.g., security incidents).
• Some travel may be required 

Apply with your CV outlining relevant cyber security leadership, compliance/assurance experience, and your hands-on technical oversight across Microsoft and hybrid environments.