Department: IT

Location: Birmingham

Description

Dains Group is undergoing an exciting period of growth, with recent acquisitions creating a fast-paced and dynamic environment across the organisation. We’re seeking a strategic and collaborative Cyber Security Manager to lead our cyber security strategy and drive continuous improvement.

In this key role, you’ll manage the relationship with our outsourced Security Operations Centre (SOC) to enhance the organisation’s Microsoft infrastructure, chair the Cyber Security Board, oversee key security platforms, and work closely with the Group IT Director to develop robust security policies and procedures.

Your leadership will be vital in strengthening security awareness, safeguarding communications, and reducing risk throughout the business.

Key Responsibilities

• Cyber Security Strategy & Policy Development: Lead the creation and implementation of cyber security policies, standards, and procedures aligned with business goals and regulatory requirements.
• Cyber Security Board Leadership: Chair and coordinate the Cyber Security Board, driving strategic discussions, risk oversight, and cross-functional alignment on cyber initiatives.
• SOC Collaboration: Work closely with the outsourced SOC to ensure effective threat monitoring, incident response, and continuous improvement of security operations.
• Microsoft Sentinel Engagement: Collaborate with internal teams and the SOC to ensure Microsoft Sentinel is effectively configured and utilised for threat detection and reporting.
• Platform Ownership – KnowBe4 & Egress: Take full ownership of the KnowBe4 security awareness platform and Egress secure communications tools. Drive adoption, manage configuration, monitor effectiveness, and report on performance.
• Cross-Business Engagement: Partner with teams across the organisation to promote cyber security awareness, support secure project delivery, and ensure security is embedded in business processes.
• Risk & Threat Management: Identify, assess, and mitigate cyber risks. Conduct regular risk assessments and ensure appropriate controls are in place.
• Incident Response & Recovery: Coordinate incident response efforts with the SOC and internal stakeholders. Lead post-incident reviews and implement lessons learned.
• Security Monitoring & Reporting: Oversee the development of dashboards and reports to provide visibility into security events, trends, and KPIs for senior stakeholders and the Cyber Security Board.
• Compliance & Governance: Ensure compliance with relevant standards and regulations (e.g., GDPR, ISO 27001, NIS2). Maintain audit readiness and support external assessments.
• Awareness & Training: Develop and deliver cyber security awareness initiatives using KnowBe4 to educate employees and reduce human-related risks.
• Third-Party Security Oversight: Evaluate and monitor the security posture of vendors and partners, ensuring alignment with organisational standards.