Cybersecurity Operations Lead

📍 Cambridge, UK (4 days On-site)

About the Opportunity

HLX Life Sciences is partnering with an innovative, globally operating life sciences organisation seeking an experienced Cybersecurity to lead and evolve its cybersecurity function.

We're looking for a hands-on cybersecurity leader with expertise in:

• Cybersecurity Strategy & Risk Management
• Microsoft 365, Entra ID & Azure Security
• Incident Response & Vulnerability Management
• Microsoft Defender, Intune & Conditional Access
• ISO27001, NIST & Security Governance

Key Responsibilities

• Define and execute the organisation's cybersecurity strategy, roadmap, and operating model.
• Own the cybersecurity risk register and provide clear reporting and recommendations to senior leadership.
• Establish and maintain security standards across Microsoft 365, Entra ID, Azure, endpoints, cloud services, SaaS platforms, and collaboration tools.
• Drive continuous improvement of key security controls including MFA, Conditional Access, privileged access management, endpoint protection, vulnerability management, encryption, DLP, logging, and monitoring.
• Lead cyber incident response planning, testing, and execution, including playbooks, tabletop exercises, escalation processes, and post-incident reviews.
• Manage relationships with external cybersecurity providers including SOC/MDR partners, penetration testers, and security consultants.
• Oversee vulnerability and exposure management across cloud, infrastructure, identity, endpoints, and externally facing services.
• Conduct cybersecurity due diligence for technology suppliers, cloud providers, research partners, and third-party vendors.
• Develop practical governance frameworks for the secure adoption of AI and emerging technologies.
• Maintain cybersecurity policies, standards, SOPs, and compliance documentation.
• Promote a strong security culture through awareness programmes, phishing simulations, and executive-level engagement.