Location: Aberdeen or Sheffield (Hybrid) Our client, a growing engineering and technology group, is looking for an experienced Cyber Security Manager to lead cyber security, information assurance and governance across the business. This is a high-impact, Group-wide role covering corporate IT, Operational Technology (OT), cloud environments and commercial software products, giving you real scope to shape strategy and make a visible difference. The role * Develop and own the Group cyber security roadmap alongside the CIO and IT leadership, covering IT, OT, cloud and digital products. * Define and maintain cyber policies, standards and governance, including the cyber risk register, risk assessments and reporting to senior stakeholders. * Lead incident response planning with an external SOC partner, including playbooks, tabletop exercises and post-incident reviews. * Provide security governance across IT and OT environments, improving asset visibility, segmentation, secure remote access and vulnerability management without compromising safety or availability. * Work with Software and Firmware Engineering teams to embed security throughout the SDLC and review the security architecture of customer-facing products. * Oversee compliance with frameworks such as ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443, and coordinate internal and external audits. * Lead supplier due diligence and support customer security questionnaires, tenders and assurance requests. What you’ll bring * Significant experience in a cyber security governance, assurance or leadership role. * Experience managing ISO 27001 or an equivalent ISMS. * Strong understanding of enterprise security architecture, secure software development and cloud security (ideally Microsoft Azure). * Knowledge of OT / Industrial Control System security. * Strong risk management skills and the ability to explain complex technical risks clearly to technical and non-technical audiences. Desirable * Experience in the energy, industrial or engineering sectors. * Experience with Cyber Essentials Plus, SOC 2, IEC 62443 or NIS2. * Certifications such as CISSP, CISM, or ISO 27001 Lead Auditor/Implementer. If you want to shape cyber security across enterprise, industrial and product environments in a collaborative, Group-wide role, apply now for more information