Responsibilities:

• Take ownership of the organisation’s security posture, helping to identify, assess and reduce cyber risk across systems, services and data
• Lead security monitoring, incident investigation and response activities, ensuring threats are identified and addressed effectively
• Drive vulnerability management and security improvement initiatives, working with technical teams to prioritise and remediate risks
• Develop, maintain and enhance security policies, standards and operational procedures
• Support regulatory, governance and data protection requirements, ensuring security controls remain aligned with business and compliance needs
• Conduct security reviews, risk assessments and control evaluations, providing practical recommendations for improvement
• Partner with internal stakeholders and third-party suppliers to embed security best practice across projects, systems and operational processes
• Coordinate security testing and assurance activities, overseeing remediation efforts and tracking progress to completion
• Contribute to resilience planning, supporting business continuity and disaster recovery initiatives
• Monitor emerging threats, industry developments and changes in the risk landscape, recommending improvements where appropriate
• Provide clear security guidance to technical and non-technical stakeholders, helping to promote a strong culture of security awareness
• Ensure security-related activities, controls and actions are appropriately documented, tracked and evidenced