Cyber Risk & Security Manager – SPIRiT UK
About this role
Call 0208 1234 365 Free Technology Health Check Contact Our Helpdesk Cyber Risk & Security Manager Posted 01 December 2025 We are seeking an experienced Cyber Risk & Security Manager to lead the delivery of cyber risk assessments, governance advisory services, security maturity programmes, and SOC strategy engagements. The role requires a highly capable security professional with experience across risk advisory, vulnerability management, security operations design, compliance frameworks, and executive reporting. The successful candidate will operate at both strategic and technical levels, supporting board-level decision-making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI-DSS, and MITRE ATT&CK. Reporting To: Director / Head of Cyber Security Location: London (Hybrid) Employment Type: Full-Time Salary: £50,000 – £70,000 (dependent on experience and sponsorship thresholds) Key Responsibilities Cyber Risk & Governance Lead end-to-end cyber risk assessments and cyber maturity reviews. Conduct cyber risk quantification exercises using recognised methodologies (e.g., FAIR). Develop and deliver tabletop exercises and resilience simulations. Produce executive-level cyber risk reports and mitigation roadmaps. Provide strategic advisory support to senior stakeholders and underwriters. Security Operations & Vulnerability Management Design and implement Security Operations Centre (SOC) operating models. Conduct vulnerability management programmes, gap analyses, and remediation tracking. Lead penetration testing and application security assessments (OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI-DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise on cloud migration security and VDI transformation programmes. Conduct asset management audits and security architecture reviews. Perform cyber breach investigations and incident management leadership. Implement automation initiatives to improve cyber risk evaluation processes. Stakeholder & Practice Development Engage with senior executives and cross-functional stakeholders. Contribute to proposal development and client solution design. Mentor junior consultants and contribute to internal capability development. Support cybersecurity awareness and outreach initiatives. Required Skills & Experience Essential 10+ years’ experience in cyber security, risk advisory, or security operations. Proven experience delivering cyber maturity assessments and risk advisory engagements. Experience designing SOC or security operating models. Strong understanding of vulnerability management and penetration testing. Experience aligning organisations to NIST CSF, ISO 27001, and related frameworks. Executive report writing and board-level presentation capability. Experience leading client engagements and managing stakeholders. Ideally big 4 experience Technical Expertise Tools: Kali Linux, Burp Suite, Acunetix, Nessus, OWASP ZAP, Nmap, Wireshark, ServiceNow. Programming knowledge: Python, JavaScript, C/C++, ASP.NET (desirable). Familiarity with MITRE ATT&CK and FAIR methodologies. Qualifications MSc in Cyber Security (or equivalent) CEH, CompTIA Security+ (required or equivalent experience) CISSP (desirable / in progress) AWS Cloud certification (desirable) CE Advisor or prepared to become a Cyber Essentials Assessor Competencies Strategic thinker with strong analytical capability Strong documentation and structured reporting ability Excellent stakeholder communication skills Leadership and mentoring capability Process improvement and automation mindset Working Hours 37.5 – 40 hours per week Visa & Compliance This role meets Skilled Worker sponsorship skill-level requirements (RQF Level 6+). Sponsorship may be considered subject to eligibility and Home Office compliance requirements. How to Apply: Call 0208 1234 365, submit the application form or email info@spirituk.com Apply For Role: Either call 0208 1234 365 or complete the form below jobs Name * First Last * Last Email * Your Details * Expected Gross Salary CV Upload (.doc or .pdf) Drop a file here or click to upload Choose File Maximum file size: 2.1MB CV Link (Website/URL, Google doc, etc.) Submit Application If you are human, leave this field blank. Share this... Share on Facebook Facebook Share on X X Share on Linkedin Linkedin Share on Reddit Reddit Share on Digg Digg Share on Stumbleupon Stumbleupon This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More Privacy & Cookies Policy Close Privacy Overview This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience. Necessary Necessary Always Enabled Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information. Non-necessary Non-necessary Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
What this role is, and what else it is called
Employers in London advertise this kind of work as Security Engineer, Fire & Security Engineer, IT Security Analyst and Cyber Security Consultant too, so it is worth searching more than one wording. It is a lead or principal Cybersecurity role in London, advertised as hybrid, splitting time between home and the office.
About hiring at Spirituk
Spirituk has 3 other live technology roles on its careers page, across Cybersecurity and IT Support & Service Desk. Of those, 75% are advertised as fully remote and 25% as hybrid. Elsewhere in its adverts Spirituk asks for Azure, Microsoft 365, PowerShell, VMware and Cisco. We have been observing Spirituk hiring technology staff since June 2026. See all Spirituk roles, salaries and stack.
How this role compares to the market
1,965 live UK roles list Python right now, from 584 employers. The median advertised salary is £80,000; 30% are advertised as remote. Browse Python roles.
555 live UK roles list C++ right now, from 150 employers. The median advertised salary is £55,000; 48% are advertised as remote. Browse C++ roles.
London has 4,324 live IT vacancies across 1,366 employers, with a median advertised salary of £70,000. Browse London roles.
Lead and principal roles make up 1,635 of the live UK IT market and advertise a median of £80,000.
Market figures are today's snapshot of live UK roles on employer careers pages; see hiring trends.
Technologies mentioned
Detected on Spirituk's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.