Cyber Defence Manager

Overview

In this Cyber Defence Manager role, you lead the organisation’s cyber defence and information security efforts within a complex, hospitality-focused business undergoing tech transformation. You will mentor a small security team, manage vendor partnerships, and drive incident response, risk management and governance. You’ll embed security into projects and initiatives while fostering a security-minded culture. This is a hands-on leadership position that shapes security maturity and protects critical assets in a growing company.

Pay / Benefits

• hybrid working
• Company discounts
• Pension contribution up to 5%
• Private healthcare
• dental plan
• cycle to work keep-fit schemes

Responsibilities

• Lead and develop the organisation’s cyber defence and information security capability
• Manage and coach a small team of Information Security professionals
• Oversee security vendor partner performance
• Own and enhance security incident response processes and recovery activities
• Lead security investigations and remediation
• Drive compliance with ISO 27001, Cyber Essentials and PCI-DSS
• Manage security audits, risk assessments and improvement plans
• Deliver security reporting, metrics and risk updates to senior stakeholders
• Partner with technology and business teams to embed security into projects and supplier engagements
• Promote a strong security culture through awareness programmes and stakeholder engagement
• Maintain awareness of emerging threats and best practices to improve security maturity

Key requirements

• Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation
• Strong knowledge of security operations, incident response, risk management and security governance
• Experience developing and implementing security policies, controls and improvement programmes
• Excellent stakeholder management and communication skills with ability to influence at all levels
• Strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practices
• Experience leading teams and driving positive change across technology and business functions
• A pragmatic and commercial approach balancing security with business objectives
• Ability to manage multiple priorities and make risk-based decisions
• Hands-on mindset with a passion for cyber security and continuous improvement

• stakeholder management
• communication
• leadership
• security operations
• incident response
• risk management

…