About this role
IT Security Manager
Cardiff
Hybrid Working (minimum 1 day per week on-site)
Reporting to the Chief Technology Officer, the successful candidate will lead a team of three Security Analysts and work in close partnership with the Data Protection Officer to ensure the organisation's information security posture supports both operational needs and regulatory compliance.
This is a senior, strategic role rather than a hands-on technical position. The organisation is looking for a leader who can drive transformation, influence stakeholders at all levels, and balance competing business priorities.
Key Responsibilities
- Lead the assessment and onboarding of a third-party Security Operations Centre (SOC), currently in the early stages of business case development
- Lead the rollout of a flat, "coffee shop" style network access model, balancing business flexibility with the operational needs of the security and data protection functions
- Provide ongoing oversight of SOC operations and performance
- Lead third-party risk assessments on an ongoing basis
- Manage, develop, and support a team of three Security Analysts
- Act as a key point of collaboration with the Data Protection Officer on data protection and information governance matters
- Represent information security at a senior stakeholder level, building buy-in for security initiatives across the organisation
Candidate Requirements
- Demonstrable experience in cyber security operations, SOC management, or security operations leadership (this role is weighted approximately 80% cyber operations, 20% Information Security)
- Working understanding of the Microsoft security stack (Purview, Sentinel, Intune)
- Strong stakeholder management and influencing skills, with the ability to engage senior leadership and technical teams alike
- Experience with CrowdStrike and/or ISO 27001 is desirable but not essential
- This role is not gated on specific tools or technologies; emphasis is placed on strategic leadership, judgement, and the ability to drive change
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in Cardiff →Why this fits a police background
- Risk & threat assessment
- Working to legislation & regulation
- Security operations
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |