Cyber Security Manager

About the role

The Cyber Security Manager will join the IT Operations Centre in London, reporting to the Head of IT. This hybrid role is responsible for protecting the organisation's IT services and infrastructure from cyber threats and ensuring compliance with security standards.

Key responsibilities

• Deploy and optimise security solutions, conduct vulnerability testing and risk analysis.
• Monitor, detect and respond to security incidents, maintaining incident response plans.
• Manage network and system security tools such as firewalls, IDS/IPS, SIEM and EDR/XDR.
• Ensure compliance with ISO27001, NIST, GDPR through audits and documentation.
• Lead security awareness training and maintain up‑to‑date security policies.
• Secure cloud services (SaaS, PaaS, IaaS) and enterprise applications using IAM and advanced controls.

Required profile

• University degree or equivalent.
• Minimum 3 years of experience in cyber security operations and engineering.
• Relevant certifications such as CISSP and Azure Security.
• Strong knowledge of the Microsoft technology stack, cloud and on‑premise environments.
• Experience with web filtering, email security, SIEM, EDR/XDR and SOC investigations (L2+).

Required skills

• SIEM
• EDR / XDR
• Vulnerability testing
• Risk analysis
• Firewalls
• IDS/IPS
• ISO27001, NIST, GDPR
• Cloud security (SaaS, PaaS, IaaS)
• Identity Access Management (IAM)
• Microsoft technology stack
• Web filtering
• Email security

What we offer

• Hybrid working environment.
• Opportunity to shape security strategy for a leading train operating business.
• Professional development and certification support.