Overview
The Cybersecurity Lead is responsible for delivering DIANA’s cyber security activities, ensuring the secure and resilient operation of its cloud, digital, and business technology services, along with cyber security architectural design. The role combines hands-on technical expertise with responsibility for cyber governance, risk management, compliance, resilience, and assurance.
Key Responsibilities
- Lead the development, implementation and continual improvement of DIANA’s cyber security, security architecture, governance framework, risk-management arrangements and assurance programme.
- Establish and manage cyber security policies, standards, control frameworks, risk registers, security metrics, and assurance documentation.
- Lead and oversee security risk assessments for DIANA Digital assets.
- Provide second-line challenge, oversight and assurance across technology projects, suppliers, cloud platforms, SaaS applications, AI solutions and operational processes.
- Lead cyber security incident response, assurance, and risk management activities.
- Lead internal and external audit, assurance, accreditation, and certification activities against relevant standards and assurance frameworks.
- Provide guidance, mentoring, or managerial leadership.
Required Experience
- A minimum of 3 years professional experience in cyber security, cloud security, security architecture, information assurance, or related technology-security roles.
- Proven experience working in government, defence, law-enforcement, national security, critical infrastructure, NATO, or equivalent high-assurance sectors handling sensitive, regulated or classified information.
- Proven experience leading cyber security governance, risk management, assurance, security accreditation, audit, and control validation activities.
- Proven experience in taking an organisation through ISO 27001 certification and other benchmarks such as Cyber Security Plus.
- Proven experience designing, implementing, securing, and assuring enterprise cloud and digital technology environments, particularly Microsoft Azure and Microsoft 365.
- Demonstrable experience assessing and managing cyber security risks across cloud services, SaaS platforms, suppliers, infrastructure, enterprise technologies, and business change initiatives.
- Experience providing disciplinary, project, or functional leadership.
Qualifications
- A minimum requirement of a Bachelor’s degree at a nationally recognised/certified University in Cyber Security, Information Security, Computer Science, Information Technology, Engineering, Digital Forensics, Networks, or a closely related technical discipline OR exceptionally, at least 10 years extensive and progressive expertise in duties related to the function of the post.
- A recognized cyber security qualification (e.g. CISSP, CCSP, CCSK, or equivalent).
- Enterprise or security architecture qualifications (e.g. TOGAF or equivalent).
- A relevant postgraduate qualification, such as an MSc in Cyber Security, Information Security, Computer Science, Engineering, Digital Forensics, Artificial Intelligence, Cloud Computing, Risk Management, or a closely related discipline (desirable).
