UK Cyber Security & Risk Senior Manager

Overview

In this role you lead UK cyber/technology risk operations in support of the UK Entity CISO, steering risk workstreams such as cloud modernization and resilience. You’ll co-develop governance packs and collaborate across PCIS, ICR, and tech teams to advance security maturity. You’ll drive cyber awareness in the UK and contribute to strategy aligned with UK and PCIS priorities. You’ll translate complex risks into clear actions and measurable outcomes that protect the business and customers.

Pay / Benefits

• generous paid time off
• healthcare coverage for you and family
• flexible hybrid work model
• inclusive culture
• wellbeing and mental health resources
• financial security programs

Responsibilities

• Oversee UK-focused cyber/technology risk delivery across change, issues, and assurance activities
• Run UK operating cadence with trackers and prioritisation to keep topics decision-ready
• Translate UK CISO priorities into defined workstreams with owners, timelines, and outcomes
• Co-lead cloud modernisation with regulatory enablement and UK scope considerations
• Support operational resilience workstreams affecting Important Business Services with clear ownership and evidence
• Co-develop governance packs with the UK Entity CISO and deliver executive-ready content
• Foster cross-functional delivery with PCIS, ICR, and technology teams and unblock blockers
• Contribute to the UK regulatory and security strategy, aligning with PCIS priorities and delivering measurable maturity improvements
• Utilise systems (Firefly, Jira, Confluence, ServiceNow, Archer, AuditBoard) to source and manage governance evidence
• Own UK cyber security awareness activities and deliver tailored communications and events

Key requirements

• 8+ years of relevant cyber/technology risk experience and a Bachelor’s degree (or equivalent)
• Proven expertise in security governance, risk management, and regulatory considerations
• Strong executive writing and ability to create committee packs, briefings, and action logs
• Proven ability to lead cross-functional delivery and influence stakeholders
• Proficient with Jira/Confluence and risk reporting tools

• Strong leadership and people development
• Excellent written and verbal communication for executive audiences
• Cross-functional collaboration and stakeholder management
• Firefly
• Jira
• Confluence

…