Head of Security

Salford
1 month ago
Applications closed

Related Jobs

View all jobs

Head of Technology Services, Cyber Security and Data Control

Director of Group Cyber Security Services

Director of Operational Technology (OT) & Manufacturing Security

Information Security Technical Assurance Lead

Senior Operational Technology (OT) Security Consultant

Security Delivery Lead

We’re recruiting a Head of Security Operations to support the Chief Information Security Officer in managing and reporting information security risks across Technology Services.

This role is critical in safeguarding the confidentiality, integrity and availability of AJ Bell’s systems and data. You’ll lead our Security Operations capability, ensuring we proactively detect, respond to and mitigate security threats, translating cyber risk into clear business impact for senior stakeholders.

You’ll lead a high-performing team responsible for proactive cyber defence and incident response, while fostering a strong security-first culture across the organisation.

About the Role

We are looking for someone to lead and evolve AJ Bell’s Security Operations function, ensuring robust capability to detect, investigate and respond to security incidents.



Oversee 24x7 operational security coverage in partnership with our managed service provider

*

Drive automation and AI-led efficiency improvements across security operations processes

*

Own and enhance AJ Bell’s incident response framework, including playbooks, testing and executive-level simulations

*

Develop and mature threat intelligence capabilities, delivering actionable insight to key stakeholders

*

Own end-to-end vulnerability management, including penetration testing and remediation tracking

*

Ensure effective operational management of supply chain security risk

*

Provide clear, data-driven MI and reporting on AJ Bell’s security posture

*

Partner with Security Engineering to define requirements where control gaps are identified

*

Manage security vendor relationships, including performance and commercial oversight

*

Lead, mentor and develop a team of security analysts, acting as an escalation point for complex incidents

*

Shape the future strategy and capability of the Security Operations function

*

Embed repeatable, measurable processes to support continuous improvement

About You

*

Deep expertise in information security risk management tools and techniques

*

Strong knowledge of industry frameworks such as ISO27001, NIST and relevant regulatory requirements (GDPR, FCA, PRA)

*

Extensive experience operating and optimising security technologies (SIEM, endpoint protection, email/web gateways, DLP etc.)

*

Strong understanding of cloud security and modern DevOps practices

*

Experience managing enterprise environments (Windows, Linux, Active Directory advantageous)

*

Knowledge of security investigations and forensic best practice (Microsoft Purview advantageous)

*

Proven leadership experience within a security operations or cyber defence function

*

Experience within financial services or e-commerce preferred

*

Strong executive-level communication skills, with experience contributing to Board-level reporting

*

Commercially aware, able to translate cyber risk into business risk

*

Strategic thinker with hands-on credibility

*

Self-motivated and comfortable operating in a fast-paced, evolving environment

About AJ Bell

AJ Bell is one of the UK’s fastest-growing investment platform businesses, supporting over 644,000 customers and managing more than £103.3 billion in assets.

Listed on the FTSE 250, we’ve been named one of the UK’s Best 100 Companies to Work For for six consecutive years and recognised as a Great Place to Work® in 2025.

With offices in Manchester, London and Bristol, we’re proud of our strong culture, collaborative environment and commitment to helping people take control of their financial futures.

What We Offer

*

28 days’ holiday, increasing to 31 with length of service, plus buy/sell options

*

Pension matched up to 8% (increasing with service)

*

Discretionary bonus and annual free share awards

*

Private healthcare, health cash plan and free onsite gym

*

Enhanced family leave and ongoing professional development

For the full list of benefits and further details about the role, click apply or visit our careers page

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.