Group Cyber Security Lead

We’re looking for an experienced Cyber Security Manager to lead the development and delivery of cyber security, information assurance and cyber governance across Nexos Group .

This is a high-impact Group role where you’ll have the opportunity to shape our cyber security strategy across corporate IT, Operational Technology (OT), cloud environments and commercial software products .

Working closely with our IT, Software and Firmware Engineering teams, senior leaders, customers and external partners, you’ll ensure security is embedded into the way we operate, develop technology and deliver solutions to our customers.

If you enjoy combining strategy, governance and technical understanding with the opportunity to influence how cyber security develops across a growing engineering organisation, this could be an excellent next step.

At Nexos, you’ll be joining an organisation where technology, engineering and innovation come together to solve complex challenges for our customers.

What makes this role particularly exciting is the breadth and influence it offers. You won’t be focused solely on corporate IT security. You’ll have the opportunity to shape cyber security across IT, OT, cloud, software and customer-facing digital solutions .

You’ll have the opportunity to:

• Shape our cyber security direction , working with senior leadership to define the Group roadmap and improvement priorities.
• Make a visible impact , helping build cyber resilience across our businesses, products and customer solutions.
• Work at the intersection of cyber and engineering , tackling challenges across traditional IT, industrial environments, connected assets, cloud platforms and software.
• Influence security from the start , embedding cyber security into software development, projects and technology decisions rather than adding it as an afterthought.
• Build and improve , with the scope to strengthen frameworks, standards, assurance processes and cyber culture across the Group.
• Work collaboratively, partnering with technical specialists, engineers, senior stakeholders, suppliers and customers.
• Benefit from hybrid working alongside the variety and challenge of a Group-wide role.

What you’ll be doing

Cyber Security Strategy, Governance & Assurance

You’ll lead the development and continual improvement of our Group cyber security approach, including:

• Working with the IT Manager and CIO to develop our cyber security roadmap across IT, OT, cloud and digital products.
• Defining and maintaining Group cyber security policies, standards and governance.
• Maintaining the cyber risk register and ensuring risks, exceptions, audit findings and actions are managed through to closure.
• Leading cyber security risk assessments across the Group.
• Developing meaningful cyber security metrics, risk reporting and assurance dashboards for senior stakeholders.
• Leading cyber incident response planning alongside our Security Operations Centre partner.
• Developing response playbooks, escalation routes, tabletop exercises and post-incident reviews aligned with business continuity and disaster recovery arrangements.
• Translating complex cyber risks into clear operational, safety, environmental, production, commercial and regulatory impacts .

IT & Operational Technology Security

A key part of this role is ensuring security extends beyond traditional enterprise IT.

You’ll:

• Provide security governance across Information Technology and Operational Technology environments , including customer-related environments.
• Develop security standards for industrial control systems, cloud platforms and connected operational assets.
• Work with Software and Firmware Engineering teams to strengthen the cyber resilience of customer-facing solutions.
• Support secure integration between enterprise IT and operational environments.
• Oversee vulnerability management across IT, cloud, OT, software products and third-party services, ensuring remediation is prioritised according to risk and business criticality.
• Work with engineering teams and asset owners to improve OT asset visibility, segmentation, secure remote access and resilience without compromising safety or availability.
• Assess emerging cyber security technologies and approaches, considering risk reduction, feasibility and operational impact.
• Define and support cyber security improvement initiatives across the Group.
• Work alongside IT to strengthen cyber security awareness, training and culture.

Secure Software & Digital Products

You’ll work closely with our Software and Firmware Engineering teams to make security an integral part of product development by:

• Embedding security throughout the Software Development Lifecycle (SDLC) .
• Reviewing security architecture for commercial software products.
• Setting requirements to ensure the data and digital elements of customer products and services are suitably protected.

Certifications & Compliance

You’ll oversee our approach to recognised cyber security frameworks and certifications, including:

• ISO 27001
• SOC 2
• NIST Cybersecurity Framework
• IEC 62443 , where appropriate

You’ll coordinate internal and external cyber security audits and ensure corrective actions are effectively implemented, evidenced and closed.

Cyber security is increasingly important to our customers and supply chain. You’ll help us demonstrate that security is taken seriously by:

• Leading cyber security due diligence for suppliers.
• Supporting customer security questionnaires and tender responses.
• Providing assurance and evidence to customers.
• Building customer confidence through strong and transparent cyber security governance.

What we’re looking for

You’ll bring significant experience within a cyber security governance, assurance or leadership role , together with the ability to operate effectively across both technical and senior stakeholder environments.

We’re looking for someone with:

• Significant cyber security governance, assurance or leadership experience.
• Experience managing ISO 27001 or an equivalent Information Security Management System.
• Strong understanding of enterprise security architecture.
• Knowledge of secure software development practices.
• Experience securing cloud environments, ideally Microsoft Azure .
• Knowledge of Operational Technology / Industrial Control System security .
• Strong cyber security risk management experience.
• Excellent communication and stakeholder management skills.
• The ability to take complex technical risks and communicate them clearly to both technical and non-technical audiences.

It would be great if you also have

• Experience within the energy, industrial or engineering sectors .
• Experience implementing Cyber Essentials Plus .
• Experience achieving or maintaining SOC 2 compliance.
• Knowledge of IEC 62443, NIS2 or other industrial cyber security standards.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor or ISO 27001 Lead Implementer .

What you’ll bring

Beyond the technical expertise, we’re looking for someone who can see the bigger picture. You’ll be comfortable setting direction while still being able to engage with the detail when required.

You’ll bring:

• Strategic thinking
• Strong leadership and influencing skills
• Sound risk judgement
• Analytical problem solving

Ready to make an impact?

This is an opportunity to take a leading role in shaping cyber security across Nexos Group , influencing everything from enterprise technology and industrial systems to software products and customer solutions.

If you’re passionate about building cyber resilience, enjoy working across technical and operational environments and want the opportunity to make a tangible difference, we’d love to hear from you.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →