Technology Delivery Lead: Cyber Security

About the role

Capco is looking for a Security Delivery Lead in London (hybrid) to lead the end-to-end delivery of complex cyber security initiatives for leading financial and energy institutions. You will work with security architects, engineers, technology teams and client stakeholders to turn security priorities into structured delivery plans, coordinate multidisciplinary workstreams and embed security-by-design across cloud, on-premise and hybrid environments.

Key responsibilities

• Lead security projects from initiation to delivery, defining scope, plans, milestones, dependencies and outcomes, using approved AI-enabled tools and automation where appropriate
• Coordinate security, engineering, architecture, technology and client workstreams, resolving blockers and overseeing IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust
• Own project governance: RAID management, status reporting, decision tracking, change control and escalation, with human review and audit trails when AI workflows are used
• Manage project resources, budgets and delivery forecasts against agreed priorities, commitments and security, risk and regulatory requirements
• Work with security architects, engineers and senior stakeholders on security controls, remediation and DevSecOps improvements

Required profile

• Proven project management experience delivering cyber security, technology, infrastructure or risk initiatives in complex environments, ideally in financial services and/or energy
• Experience coordinating delivery across cloud, on-premise or hybrid environments with security architects, engineers and business stakeholders
• Strong communication, organisation and problem-solving skills, with curiosity about AI tools and responsible use, review and escalation

Required skills

• Planning, RAID management, governance, financial tracking, resource coordination and stakeholder reporting
• Understanding of IAM, cloud security, endpoint protection, SIEM, application security and vulnerability management
• Working knowledge of NIST, ISO 27001 and OWASP
• Bonus: DevSecOps, SAST, SCA, DAST, container scanning, Zero Trust, regulatory remediation, PMP, PRINCE2, Agile/Scrum, CISSP, CISM or cloud security certifications, and experience with client proposals, RFPs or security transformation programmes

What we offer

• Discretionary bonus, pension, health, life and critical illness insurance
• Mental health support and family-friendly leave, including 8 backup care sessions
• 5 weeks of annual leave, 40 hours of training per year and a Business Coach
• Gympass, travel insurance, Tastecard, season ticket loans, Cycle to Work and dental insurance