Cyber Security Officer

About the role

We are seeking a Cyber Security Officer to lead and enhance the security posture of a well‑established membership organisation based in London. The role will own security monitoring, incident response and vulnerability management, working closely with technical teams and business stakeholders.

Key responsibilities

• Take ownership of the organisation’s security posture, identifying, assessing and reducing cyber risk across systems, services and data.
• Lead security monitoring, incident investigation and response activities to ensure threats are identified and addressed effectively.
• Drive vulnerability management and security improvement initiatives, collaborating with technical teams to prioritise and remediate risks.
• Develop, maintain and enhance security policies, standards and operational procedures.
• Support regulatory, governance and data‑protection requirements, aligning controls with business and compliance needs.
• Conduct security reviews, risk assessments and control evaluations, providing practical recommendations.
• Partner with internal stakeholders and third‑party suppliers to embed security best practice across projects and processes.
• Coordinate security testing and assurance activities, overseeing remediation and tracking progress.
• Contribute to resilience planning, business continuity and disaster‑recovery initiatives.
• Monitor emerging threats and industry developments, recommending improvements as needed.

Required profile

• Proven experience in cyber security, information security, technology risk or a related discipline.
• Strong understanding of security governance, risk management and operational security practices.
• Experience working within cloud‑based and modern technology environments.
• Knowledge of data‑protection, compliance and security‑assurance principles.
• Experience assessing, prioritising and mitigating security risks in a business environment.
• Familiarity with security monitoring, threat detection, incident response and vulnerability management.
• Broad understanding of infrastructure, networks, identity management and application security concepts.
• Ability to analyse complex information, identify root causes and deliver practical solutions.
• Excellent communication skills for engaging with both technical and non‑technical stakeholders.

Required skills

• Security monitoring
• Threat detection
• Incident response
• Vulnerability management
• Infrastructure security
• Network security
• Identity management
• Application security
• Cloud security