Cyber Security Lead

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Direct and manage daily cyber security operations across GenesisCare UK.

• Supervise security monitoring, threat detection, and managed SOC services.

• Coordinate investigations into cyber security incidents, including response and remediation efforts.

• Oversee vulnerability assessments, prioritize security risks, and drive remediation actions.

• Implement, monitor, and continuously enhance technical security controls.

• Assist in achieving Cyber Essentials Plus certification and develop the Information Security Management System (ISMS).

• Provide cyber security guidance across infrastructure, applications, and digital transformation initiatives.

• Advocate for secure-by-design principles.

• Generate security metrics, dashboards, and reports for management and governance purposes.

• Organize phishing simulations, cyber awareness programs, and security communications.

• Support cyber resilience, disaster recovery testing, and recovery assurance protocols.

• Collaborate with internal stakeholders and external security partners.

• Report directly to the Head of Information Security (CISO).

⛳️ Requirements

• Demonstrated experience in cyber security, security operations, or a technical infrastructure position with substantial security responsibilities.

• Background in managing security monitoring, incident response, and vulnerability management tasks.

• Experience collaborating with managed SOC providers and utilizing Security Information and Event Management (SIEM) solutions.

• In-depth knowledge of Microsoft 365 security, encompassing Entra ID, Conditional Access, MFA, and Privileged Identity Management (PIM).

• Hands-on experience with Microsoft Defender XDR and Purview, including threat detection, data loss prevention, and Secure Score enhancement.

• Familiarity with Heimdal Security solutions for patch management, threat prevention, antivirus, and endpoint protection.

• Experience in leading or assisting an ISO 27001-aligned ISMS, including conducting risk assessments, developing policies, audits, and achieving Cyber Essentials Plus certification.

• Strong understanding of security technologies related to endpoints, identity, cloud, email, and networks.

• Ability to evaluate technical security risks and coordinate effective remediation strategies.

• Excellent analytical, problem-solving, and communication skills, with the ability to convey technical concepts to non-technical team members.

• A proactive and collaborative mindset with the capacity to manage conflicting priorities.

• A valid UK driving licence and access to a personal vehicle insured for business use.

• Willingness to be flexible outside of standard working hours for cyber security incident response tasks.

• Experience in healthcare or another regulated sector is preferred.

• Knowledge of ISO 27001, Cyber Essentials Plus, and the NIST Cybersecurity Framework is beneficial.

• Familiarity with Microsoft Azure security technologies is advantageous.

• Experience supporting penetration testing, external audits, and security certification initiatives is a plus.

• A relevant degree, professional cyber security certification, or equivalent practical experience is desirable.

🏝️ Benefits

• 25 days of annual leave plus bank holidays.

• Private medical and dental insurance.

• Contributory pension scheme.

• Income protection.

• Employee Assistance Programme.

• Access to radiotherapy treatment for eligible family members.

• Health and wellbeing support.

• A variety of retail and lifestyle discounts.

• Opportunities for professional development and career advancement.