Cybersecurity Risk & Operations Lead
Vacancy at a glance
Confirm details and submission instructions on the original advert.
Overview
This is a senior, hands-on cybersecurity leadership role responsible for driving the day-to-day cybersecurity operating rhythm across Core Group. You will work across our retail, distribution and corporate environments to identify cyber risk, improve security visibility, drive remediation, coordinate incidents and strengthen security awareness across the business.
Requirements
- 8–10+ years of cybersecurity experience
- Strong practical cybersecurity experience across enterprise infrastructure, cloud and endpoint environments
- Experience with EDR/XDR, SIEM, SOC operations, vulnerability management and security monitoring platforms
- Good working knowledge of Microsoft Azure and Microsoft 365 security controls
- Strong understanding of identity management, privileged access, network segmentation and firewall principles
Responsibilities
- Take ownership of operational cybersecurity risk across endpoints, servers, cloud services, networks, applications, stores and other relevant technology environments
- Maintain a clear view of the organisation’s assets, controls and security monitoring coverage
- Identify security blind spots and ensure appropriate telemetry and log sources are integrated into the SOC/SIEM environment
- Drive the remediation of security weaknesses, vulnerabilities and control gaps within agreed timelines
- Conduct regular security control reviews across Microsoft Azure, Microsoft 365, networks, firewalls, privileged access, remote access and other key technology environments
- Lead the day-to-day relationship with our external Security Operations Centre
- Act as the on-site cybersecurity incident coordinator during significant security events
- Drive the organisation’s vulnerability management programme
- Define and maintain minimum cybersecurity expectations for critical suppliers and technology partners
- Lead a practical and visible cybersecurity awareness programme across the organisation
- Produce clear and concise reporting on cybersecurity risks, incidents, vulnerabilities, monitoring coverage, third-party exposure and remediation progress
Prepare for this opportunity
SpanSam guidance · Practical advice based on this listing, not additional employer requirements.
Match your background to the requirements
Check the type and length of experience requested. Make relevant roles easy to find with consistent start and end dates, then explain your own responsibilities. Label internships, practical training and volunteering accurately so the recruiter can distinguish them from other employment.
Use the duties to tailor your CV
For Cybersecurity Risk & Operations Lead, use the responsibilities above to decide which examples deserve space in your application. Choose a relevant task or project, explain what you personally did and describe the outcome. Use a measurable result where you have one, without inventing figures or sharing confidential information.
You do not need to repeat the whole advert in your CV. Help the reader connect your evidence to the advertised work. If you have not performed a duty before, describe relevant learning or transferable experience honestly rather than presenting it as a task you have already done.
Plan your submission
Check the original application page before preparing your final submission. If it uses a portal, review the required fields and file formats, complete each required step and look for a submission confirmation. Uploading a CV or creating a profile may be only part of the process.
Before applying, consider the advertised workplace and employment arrangement. Check any practical conditions that affect your availability with the employer rather than relying on another vacancy with a similar title.
About this listing: SpanSam is an opportunity discovery service and is not the hiring employer unless explicitly stated. Application decisions and source-listing changes are controlled by the employer or institution.