Cyber Security Manager

Location: Aberdeen or Sheffield (Hybrid)

Our client, a growing engineering and technology group, is looking for an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. This is a high-impact, Group-wide role covering corporate IT, Operational Technology (OT), cloud environments and commercial software products, giving you real scope to shape strategy and make a visible difference.

The role

* Develop and own the Group cyber security roadmap alongside the CIO and IT leadership, covering IT, OT, cloud and digital products.

* Define and maintain cyber policies, standards and governance, including the cyber risk register, risk assessments and reporting to senior stakeholders.

* Lead incident response planning with an external SOC partner, including playbooks, tabletop exercises and post-incident reviews.

* Provide security governance across IT and OT environments, improving asset visibility, segmentation, secure remote access and vulnerability management without compromising safety or availability.

* Work with Software and Firmware Engineering teams to embed security throughout the SDLC and review the security architecture of customer-facing products.

* Oversee compliance with frameworks such as ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443, and coordinate internal and external audits.

* Lead supplier due diligence and support customer security questionnaires, tenders and assurance requests.

What you’ll bring

* Significant experience in a cyber security governance, assurance or leadership role.

* Experience managing ISO 27001 or an equivalent ISMS.

* Strong understanding of enterprise security architecture, secure software development and cloud security (ideally Microsoft Azure).

* Knowledge of OT / Industrial Control System security.

* Strong risk management skills and the ability to explain complex technical risks clearly to technical and non-technical audiences.

Desirable

* Experience in the energy, industrial or engineering sectors.

* Experience with Cyber Essentials Plus, SOC 2, IEC 62443 or NIS2.

* Certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer.

If you want to shape cyber security across enterprise, industrial and product environments in a collaborative, Group-wide role, apply now for more information