Cybersecurity Lead - Work from home

We are seeking an experienced Cybersecurity Lead to oversee cybersecurity strategy, governance and risk for a global manufacturing and engineering organisation. This senior leadership role will drive security standards, manage the cyber risk framework, and guide security improvements across a complex, multi-country IT and operational technology environment. Working closely with executive stakeholders, regional IT providers and a managed security operations team, you will shape the organisation's security roadmap, strengthen resilience, and build a culture of security awareness.

• Define and own the group's cyber security strategy, maturity roadmap and investment priorities, aligned to the business and its risk appetite. Set the standards that IT, regional providers and MSPs must meet.
• Own the cyber risk register, the control framework and the Essential Eight maturity programme. Drive measurable improvement against an agreed target maturity, and report posture and risk clearly to executives and the board.
• Define security architecture principles and requirements across identity, endpoint, network, cloud, and the boundary between corporate IT and operational technology (OT) at manufacturing sites. Embed security into how the environment is designed and how change is governed.
• Own the incident response framework and lead major-incident response, coordinating the analyst, Arctic Wolf, IT teams and the business. Own post-incident review and the improvements that follow.
• Set and assure the security requirements for MSPs and regional providers, and lead the assessment and risk reduction of operational technology and plant networks, an area that spans IT and plant engineering.
• Own the relationship and roadmap for the security toolset (Microsoft Defender, Arctic Wolf and related), ensuring the investment delivers measurable risk reduction, and advise on security implications of major programmes including the D365 rollout.
• Lead and develop the IT Security Analyst, build security awareness across the business, and raise the organisation's overall security maturity and culture.
• Lead a two-person security function comprising this strategic lead role and an IT Security Analyst who handles hands-on monitoring, investigation and remediation, supported by Arctic Wolf as the managed SOC. Maintain a clear separation between setting and owning the security direction and executing it day to day. Set the standard and own the risk; the function below you delivers against it.

• Significant experience in a senior cybersecurity role - security manager, lead, or equivalent - owning strategy, governance and risk, not solely operations. As a guide, 8+ years in cybersecurity with several years in a leadership or strategic capacity.
• Proven ownership of a security framework and maturity programme (Essential Eight, NIST, ISO 27001 or equivalent), with a track record of measurable improvement and executive or board reporting.
• Strong grounding in securing Microsoft enterprise environments (Defender, Entra ID, Microsoft 365) and in working with a managed SOC or MDR provider such as Arctic Wolf.
• Experience managing cyber risk across a complex, multi-site or multi-country organisation, and the judgment to prioritise risk against business reality.
• Genuine capability to face executives, auditors and the business, translating technical risk into decisions, and to hold a security standard against operational pressure.
• Experience of, or genuine appetite for, operational technology (OT) and industrial environment security is a strong advantage given our manufacturing footprint.

• Manufacturing, industrial or critical-infrastructure security experience.
• Senior security certifications (CISSP, CISM, or equivalent).
• Experience leading security through a major transformation or ERP programme.
• Familiarity with ITSM-embedded security operations (Freshservice or similar).