WSS Associates
Senior Security Manager - (Microsoft Stack)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Security Manager
Location: London (Hybrid)
Type: Permanent
Are you an experienced cyber security professional looking for a role where you can genuinely influence the security strategy of a large, technology-driven organisation?
Our client, a leading UK real estate business, is looking to appoint a Senior Security Manager to join its growing technology function. This is a newly created position offering the opportunity to take ownership of cyber security operations, governance and resilience within a business investing heavily in digital transformation and cloud technologies.
Working closely with the Security & Infrastructure Director, you'll play a key role in shaping and enhancing the organisation's security posture while collaborating with internal stakeholders and managed service partners.
The Opportunity
This is a hands-on leadership role that combines technical expertise with strategic oversight. You'll own day-to-day security operations, drive continuous improvement across security controls, and ensure security is embedded throughout technology delivery and business change initiatives.
You'll have responsibility for:
- Leading security operations across Microsoft Defender, Microsoft Sentinel, identity management, vulnerability management, and endpoint security.
- Managing relationships with external Managed Security Service Providers (MSSPs) and Managed Service Providers (MSPs), ensuring service delivery and continuous improvement.
- Leading incident response activities, coordinating technical remediation, and post-incident reviews.
- Driving security governance, assurance reporting, risk management, and compliance activities.
- Maintaining security policies, standards, and risk registers aligned to recognised frameworks including NIST, ISO 27001, CIS Controls, and NCSC CAF.
- Embedding Secure by Design principles across cloud platforms, applications, and software delivery.
- Acting as the security lead on technology projects, reviewing new solutions, and ensuring appropriate security controls are implemented.
- Managing third-party cyber risk, supplier assessments, and vendor assurance processes.
- Supporting business resilience, disaster recovery planning, and security awareness programmes across the organisation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
We're looking for an experienced security professional who enjoys taking ownership, solving complex problems, and working across both technical and business teams.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You'll ideally have:
- Proven experience in a Security Manager, Cyber Security Manager, Security Operations, or similar role.
- Hands-on experience with Microsoft Defender, Defender for Endpoint, Defender for Cloud, and Microsoft Sentinel.
- Strong knowledge of security operations, incident response, vulnerability management, and security monitoring.
- Experience working within or alongside an MSSP/MSP environment.
- A solid understanding of information security governance, risk management, and compliance.
- Knowledge of security frameworks including NIST CSF, ISO 27001, CIS Controls, and NCSC CAF.
- Experience embedding security into cloud and application delivery environments.
- Excellent stakeholder management and communication skills, with the ability to present security risks and recommendations to both technical and non-technical audiences.
The following would be advantageous:
- CISSP, CISM, or equivalent certifications.
- Experience with Azure security technologies.
- Knowledge of DevSecOps practices and secure software development.
- Experience within a private equity-backed or highly regulated environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location