Cyber Security and Centralised Services Manager

- Serve as the primary escalation point for complex IT and cybersecurity incidents, including malware infections, ransomware attacks, phishing attempts, and unauthorised access events. - Monitor, analyse, and respond to alerts from client security platforms (MDR/XDR, SentinelOne, Huntress, Fortinet, Mimecast, Avanan, Defender) to ensure rapid threat mitigation. - Conduct vulnerability assessments, risk analyses, and security audits across client environments, providing actionable recommendations and remediation guidance. - Implement and maintain security hardening across infrastructure, cloud services, endpoints, and networks, in alignment with best practices and frameworks such as ISO27001, NIST, and Cyber Essentials Plus. - Lead and coordinate incident response efforts, including root cause analysis, threat containment, and post-incident reporting for clients. - Collaborate with the Project and Service Desk teams to embed security into deployments, migrations, upgrades, and automation workflows, ensuring systems remain secure by design. - Maintain and improve Standard Operating Procedures (SOPs) for security operations, ensuring knowledge is shared across the team for rapid incident handling. - Provide mentorship and cybersecurity guidance to junior engineers and Service Desk staff, fostering a culture of security awareness and proactive threat management. - Perform ongoing threat intelligence monitoring and security trend analysis to anticipate risks and protect client environments. - Support clients in security reporting, compliance reviews, and continuous improvement initiatives, helping them meet regulatory and industry security standards.