Cyber Security Programme Manager - Contract
Location: London (Hybrid - 3 days onsite at Bishopsgate HQ)
Contract Length: 6 months (with potential extension up to 36 months)
IR35 Status: Outside IR35
Start Date: ASAP
Day Rate: Competitive
We are seeking an experienced and strategic Cyber Security Programme Manager to lead a major enterprise-wide cyber security uplift programme for a leading organisation in the construction industry. This transformation initiative spans 24-36 months and aims to significantly enhance the organisation's security posture across both cloud (Microsoft Azure) and on-premise environments, aligned to the NIST Cybersecurity Framework (CSF) and CIS Controls.
Key Responsibilities
 * Lead the end-to-end delivery of a multi-stream cyber security uplift programme
 * Manage the RFP process and selection of third-party vendors and consultancies
 * Oversee the external delivery partner, ensuring accountability for risks, issues, and deadlines
 * Deliver initiatives across people, process, technology, and governance
 * Manage smaller internal cyber security projects outside the partner's scope
 * Maintain programme governance, risk management, and resource planning
 * Collaborate with senior stakeholders, IT teams, and external suppliers
 * Drive change management and embed new security disciplines across the organisation
 * Monitor progress against KPIs, including NIST CSF and CIS maturity improvements
 * Ensure compliance with internal policies, data protection laws, and industry standards
 * Manage programme budgets and ensure value delivery
Technology Environment
Cloud Security (Microsoft Azure):
 * Microsoft Sentinel
 * Microsoft Defender (Cloud, Endpoint, Office 365)
 * Microsoft Entra ID (Azure AD)
 * Microsoft Purview
 * Microsoft Intune
 * Azure Security Center
Information Security (On-Premise):
 * Firewalls (e.g. Palo Alto, Fortinet)
 * Intrusion Detection/Prevention Systems (IDS/IPS)
 * Endpoint Protection Platforms (EPP)
 * SIEM tools (on-prem or hybrid)
 * Identity & Access Management (IAM)
 * Patch management and vulnerability scanning
 * Data Loss Prevention (DLP)
Candidate Profile
 * Proven experience delivering large-scale cyber and information security programmes
 * Strong hands-on background in cyber security and technical delivery
 * Deep understanding of Microsoft Azure security architecture and tooling
 * Experience managing third-party vendors and consultancies
 * Familiarity with NIST CSF, CIS Controls, and ISO 27001
 * Excellent stakeholder engagement and communication skills
 * Relevant certifications (e.g. SC-100, CISSP, CISM, ISO 27001 Lead Implementer)
