Cyber Security Lead

A Charity in London are seeking an experienced Cyber Security Lead to provide leadership and accountability for all cyber security concerns across the organisation.

This role will serve as the lead on cyber security matters, liaising and seeking assurance whilst working collaboratively with the team to help guide their strategy, design, implementation and continuous improvement of local security compliance, infrastructure, policies and practices. You will need both experience of security frameworks and internal stakeholder engagement regarding security issues and also by able to get hands on when needed within the estate.

The successful candidate will be responsible for assuring the protection of their digital assets, framework and regulatory compliance (such as CE+, CAF, ISO27001 and GDPR/DPA), and minimizing internal and supplier risks through liaising with the team and their SaaS providers. The successful candidate will be able to get hands on initially.

Skills & Experience

5+ years in cyber security with leadership or ownership of security functions.
Strong knowledge of network, application, cloud (AWS/Azure), and endpoint security.
Ability to analyse vulnerabilities, threats, procedures and architectural design, producing reports and sharing intelligence.
Hands-on experience with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation.
Experience working with SOC teams and supplier security assessments.
Familiarity with CAF, CE+, NIST, CIS Controls, ISO 27001.
Strong incident response, analytical, and problem solving skills.
Knowledge of AI/ML risks and AI governance.
Experience with phishing campaigns, penetration testing, and remediation.
Understanding of healthcare data protection, ideally NHS/UK standards.
Excellent communication skills across technical and senior stakeholder groups.
Organised, proactive, and committed to continuous learning
Only candidates based in UK and eligible to work in UK are allowed