Cyber Security Lead – London

About the role

We are seeking an experienced Cyber Security Lead to take ownership of all cyber security matters for a London‑based charity. You will guide strategy, design, implementation and continuous improvement of security compliance, infrastructure, policies and practices.

Key responsibilities

• Provide leadership and accountability for the organisation’s cyber security posture.
• Develop and maintain security frameworks such as CE+, CAF, ISO 27001 and GDPR/DPA.
• Collaborate with internal teams and SaaS providers to assess and mitigate risks.
• Conduct vulnerability analysis, threat modelling and produce actionable reports.
• Oversee incident response, phishing campaigns and penetration testing activities.
• Work closely with SOC teams and perform supplier security assessments.

Required profile

• 5+ years of experience in cyber security, including leadership or ownership of security functions.
• Proven ability to engage senior and technical stakeholders.
• Hands‑on approach with willingness to work directly within the estate.
• Strong analytical, problem‑solving and communication skills.

Required skills

• Network, application, cloud (AWS, Azure) and endpoint security.
• SIEM platforms – e.g., Arctic Wolf.
• Fortinet firewalls, Nessus vulnerability scanning and remediation.
• Familiarity with CAF, CE+, NIST, CIS Controls and ISO 27001.
• Experience with AI/ML risk assessment and AI governance.
• Phishing campaign management, penetration testing and remediation.
• Understanding of healthcare data protection standards (NHS/UK).