Information & Cyber Security Manager – SC Cleared – Inside IR35

SR2
Information & Cyber Security Manager
Inside IR35: 500 – 550 per day
Hybrid: 2 days per week on site in London
Active SC is a prerequisite

We are supporting a large-scale national technology transformation programme delivering a secure, resilient communications and data platform used across the UK public sector. This role sits within the Security Operations pillar, providing senior operational leadership and acting as a key interface between the programme, delivery partners, and outsourced security service providers.

This is not a traditional in-house SOC role. The programme operates a hybrid SOC model, where monitoring and core SOC services are delivered by external suppliers under contract. The internal security function is responsible for setting policy, direction, assurance, and defining outcomes, while suppliers execute day-to-day monitoring and response activities. The role is critical in supporting the mobilisation and maturation of the SOC capability, addressing challenges in standing up and operationalising the function within a complex, multi-supplier environment.

Key Responsibilities

• Lead and manage day-to-day security operations for the delivery of the ESN solution. This will include incident response planning, vulnerability assessment and planning for the target architecture, and threat monitoring.
• Support the on-going security operations activities, work with various suppliers in ensuring deliverables align with contracts
• Work with systems integration (SI) partners to build out an end-to-end security operations centre.
• Lead and participate in various security forums
• Act as the primary point of contact for operational security matters within ESMCP, liaising with suppliers, stakeholders, and wider security teams.
• Work with SI partners to review and maintain security operational procedures, playbooks, and reporting mechanisms.
• Support the Head of Security Operations in delivering strategic security objectives and continuous improvement initiatives.
• Provide expert advice on security risks, mitigations, and incident handling to senior leadership and programme teams.
• Lead security investigations and coordinate with wider teams including emergency services or government agencies when required.