Digital Resilience Manager
CV-LibraryRotherham, South YorkshirepermanentPosted: 24 June 2026
Apply NowDigital Resilience Manager
Location: South Yorkshire (Hybrid – minimum 2 days per week on-site)
Job Type: 12-Month Fixed-Term Contract
Salary: £50,000 - £70,000 per annum (Depending on experience)
Hours: Full-time, 37.5 hours per week (Monday–Friday, 9am–5pm)
About the Role
Are you an experienced Information Security professional looking to take full ownership of a digital resilience function? We are recruiting a Digital Resilience Manager to lead and mature the cyber and information security capability for a rapidly growing FTSE 250 business.
This is a broad, hands-on 12-month fixed-term contract. The role is perfectly split to keep you engaged across both strategy and operations:
*
70% Governance, Risk & Compliance (GRC): Policy, risk management, assurance, and supplier security.
*
30% Security Operations: Managing an outsourced detection and response capability (MSSP).
You will work closely with cross-functional teams to embed security-conscious practices, taking day-to-day direction from the internal Director of Digital Transformation and receiving professional, strategic oversight from an external Fractional CISO.
Key Responsibilities
Governance, Risk & Compliance (70%)
*
Policy & Frameworks: Own the lifecycle of digital resilience policies and standards—drafting, reviewing, and ensuring compliance with changing threat landscapes.
*
Risk Management: Maintain the functional risk register, run the Risk & Compliance Committee, and translate technical risks into clear business language for board reporting.
*
Audit & Certification: Track and remediate internal/external audit findings, maintain Cyber Essentials compliance, and help prepare the business for future ISO 27001 certification.
*
Third-Party Security: Oversee the supplier security risk process, embedding security requirements into procurement and onboarding.
*
Data Protection & Training: Conduct DPIAs in collaboration with Legal, and design/run the company-wide security awareness and phishing simulation programmes.
Security Operations (30%)
*
MSSP Oversight: Act as the primary point of contact for the Managed Security Service Provider, managing day-to-day detection, response, and service levels.
*
Vulnerability Management: Operate the vulnerability management cycle, prioritising and driving remediation aligned to Cyber Essentials.
*
Incident Response: Lead the coordination of security incidents alongside internal teams and incident response partners (occasional out-of-hours support may be required, compensated via TOIL or pay).
*
Technical Assurance: Oversee endpoint protection, identity controls, and email security, while scoping and coordinating external penetration testing.
About You
Essential Criteria:
*
Proven experience in cyber/information security spanning both GRC and operational security.
*
Strong grasp of risk management principles, risk registers, and running governance forums.
*
Demonstrable experience overseeing an MSSP (alert triage, tuning, and service governance).
*
Solid understanding of vulnerability management, incident response, and third-party supply chain risk.
*
Knowledge of UK GDPR and experience conducting DPIAs.
*
Superb communication skills, with the ability to influence stakeholders at all levels and translate technical terms into business language.
Desirable Criteria:
*
Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
*
Experience with ISO 27001 implementation and Cyber Essentials / Cyber Essentials Plus.
*
Familiarity with Microsoft 365 security tooling (Intune, Conditional Access, Defender).
*
A background in property, construction, or similar industries.
What’s on Offer?
*
Salary: £50,000 - £70,000 (DOE)
*
Work-life Balance: Structured hybrid working (2 days on-site in South Yorkshire)
*
Flexibility: TOIL or paid overtime for the rare occasions out-of-hours incident support is required.
*
Professional Growth: Direct exposure to executive leadership and mentoring from a Fractional CISO.
To Apply: If you are a proactive problem-solver who thrives in a dynamic, growing environment, please submit your CV today for immediate consideration.
*Please not visa sponsorship is not available on this role
Location: South Yorkshire (Hybrid – minimum 2 days per week on-site)
Job Type: 12-Month Fixed-Term Contract
Salary: £50,000 - £70,000 per annum (Depending on experience)
Hours: Full-time, 37.5 hours per week (Monday–Friday, 9am–5pm)
About the Role
Are you an experienced Information Security professional looking to take full ownership of a digital resilience function? We are recruiting a Digital Resilience Manager to lead and mature the cyber and information security capability for a rapidly growing FTSE 250 business.
This is a broad, hands-on 12-month fixed-term contract. The role is perfectly split to keep you engaged across both strategy and operations:
*
70% Governance, Risk & Compliance (GRC): Policy, risk management, assurance, and supplier security.
*
30% Security Operations: Managing an outsourced detection and response capability (MSSP).
You will work closely with cross-functional teams to embed security-conscious practices, taking day-to-day direction from the internal Director of Digital Transformation and receiving professional, strategic oversight from an external Fractional CISO.
Key Responsibilities
Governance, Risk & Compliance (70%)
*
Policy & Frameworks: Own the lifecycle of digital resilience policies and standards—drafting, reviewing, and ensuring compliance with changing threat landscapes.
*
Risk Management: Maintain the functional risk register, run the Risk & Compliance Committee, and translate technical risks into clear business language for board reporting.
*
Audit & Certification: Track and remediate internal/external audit findings, maintain Cyber Essentials compliance, and help prepare the business for future ISO 27001 certification.
*
Third-Party Security: Oversee the supplier security risk process, embedding security requirements into procurement and onboarding.
*
Data Protection & Training: Conduct DPIAs in collaboration with Legal, and design/run the company-wide security awareness and phishing simulation programmes.
Security Operations (30%)
*
MSSP Oversight: Act as the primary point of contact for the Managed Security Service Provider, managing day-to-day detection, response, and service levels.
*
Vulnerability Management: Operate the vulnerability management cycle, prioritising and driving remediation aligned to Cyber Essentials.
*
Incident Response: Lead the coordination of security incidents alongside internal teams and incident response partners (occasional out-of-hours support may be required, compensated via TOIL or pay).
*
Technical Assurance: Oversee endpoint protection, identity controls, and email security, while scoping and coordinating external penetration testing.
About You
Essential Criteria:
*
Proven experience in cyber/information security spanning both GRC and operational security.
*
Strong grasp of risk management principles, risk registers, and running governance forums.
*
Demonstrable experience overseeing an MSSP (alert triage, tuning, and service governance).
*
Solid understanding of vulnerability management, incident response, and third-party supply chain risk.
*
Knowledge of UK GDPR and experience conducting DPIAs.
*
Superb communication skills, with the ability to influence stakeholders at all levels and translate technical terms into business language.
Desirable Criteria:
*
Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
*
Experience with ISO 27001 implementation and Cyber Essentials / Cyber Essentials Plus.
*
Familiarity with Microsoft 365 security tooling (Intune, Conditional Access, Defender).
*
A background in property, construction, or similar industries.
What’s on Offer?
*
Salary: £50,000 - £70,000 (DOE)
*
Work-life Balance: Structured hybrid working (2 days on-site in South Yorkshire)
*
Flexibility: TOIL or paid overtime for the rare occasions out-of-hours incident support is required.
*
Professional Growth: Direct exposure to executive leadership and mentoring from a Fractional CISO.
To Apply: If you are a proactive problem-solver who thrives in a dynamic, growing environment, please submit your CV today for immediate consideration.
*Please not visa sponsorship is not available on this role