Cyber Security Manager
Summary
Cyber Security Manager leading governance, risk, compliance, security operations, incident response and security engineering for a furniture retailer, with hands-on infrastructure support across cloud, identity, endpoint and network technologies.
About the role
Reporting to the Infrastructure and Operations Manager, you will be Fantastic Furniture's primary cybersecurity subject matter expert. You will lead cybersecurity governance, risk, compliance, security operations, incident response and security engineering, working closely with technology teams, business leaders, auditors, regulators, vendors and managed service providers. The role combines strategic ownership with hands-on delivery. Cybersecurity remains your primary focus, while your practical infrastructure knowledge will enable you to support complex Level 3 issues across cloud, identity, endpoint, server and related technologies when required.
What you'll do
- Own and continuously improve the organisation's cybersecurity framework, policies, standards, control libraries, information asset registers and procedures.
- Identify, assess and prioritise cyber risks and vulnerabilities, then drive practical mitigation plans through to completion.
- Lead security incident preparation and response, including detection, containment, investigation, recovery and post-incident improvement.
- Oversee security monitoring across networks, systems, applications and data, ensuring incidents are responded to within agreed service levels.
- Provide clear reporting on the organisation's security posture to senior leaders and the Audit & Risk Committee.
- Coordinate security audits, assessments and penetration testing, and manage resulting remediation activities.
- Assess third-party security risk and manage external security providers, auditors and technology vendors.
- Shape and oversee security architecture and technologies, including identity, endpoint, network, cloud, encryption, authentication and threat-detection controls.
- Promote a strong security-aware culture through practical education, communication and stakeholder engagement.
- Support infrastructure administration, technical changes, patching, backup and disaster recovery testing, plus complex Level 3 troubleshooting where needed.