Security Operations Lead

Working at the Cumberland, you become part of something special. We’re a Mutual organisation, committed to improving the lives of our colleagues, customers, and community. Our values are incredibly important to us.

We’re on an exciting transformational journey with our people firmly at the forefront of our plans. If you want to work for a team integral in helping to drive cultural change, a team where you can bring your whole self to work bringing your energy and creativity to make a positive difference, then this is the job for you.

We have an opportunity for a Security Operations Lead to join us, based within our Security Operations function.

This will be a fixed term contract position for a period of 12 months.

You’ll be required to travel to Cumberland house in Carlisle as and when required for meetings and operational tasks. The expectation will be a minimum of 2 days per month, on average.

**The Benefits**
- ** Salary -**up to £71,631 p.a. depending on skills and experience.
- ** Holidays** - 25 days holiday plus public holidays and the opportunity to buy and sell up to 3 days.
- ** Learning and** **Development opportunities** - We want you to grow in your role. We’ll work together to support your personal and professional development.
- ** Hybrid Working** - the tools and equipment you need to be able to work from home when you need to, depending on your role.
- ** Health and Wellbeing** - a calendar of events and activities throughout the year, Mental Health & Wellbeing champions, and Cycle to Work scheme.
- ** Community Day** - We offer our people an extra paid day off every year to help local charities and community organisations.

**What will you be doing?**

Reporting to our Senior Security Operations Manager, you’ll work alongside Security Analysts, responsible for our security monitoring and incident response capabilities within the Cumberland.

You’ll be responsible for timely detection of security incidents, effective response and the continuous improvement of our preventative and detective controls. Working alongside our wider IT operations team to collectively protect our customers, colleagues and assets whilst enabling business operations.

**Key Responsibilities**
- Performing in-depth analysis and investigation of security alerts and events
- Lead the response to security incidents.
- Maintaining and optimising our security operations tools and processes.
- Testing the effectiveness of our preventative and detective controls, probing weaknesses and implementing improvements alongside our risk and engineering teams.
- Manage daily workload of the Security Operations team and support the security analyst in their role.

**About you**:
You’ll have strong, practical knowledge of security frameworks, industry standards, and regulatory requirements, such as Cyber Essentials Plus, ISO 27001, and GDPR as well as experience with Microsoft security tools, including the Defender, Entra ID, Purview, and cloud platforms (Primarily Azure ).

We’re looking for experience of configuring and management of SIEM tooling in a medium sized enterprise. Certifications such as CISSP, CISM are a must have requirement. Accreditations in Azure or AWS are desirable.

Other essential requirements include:

- Hands-on skills in areas such as identity and access management, endpoint protection, vulnerability and patch management, and cloud security.
- Ability to explain complex technical issues clearly to different audiences, both technical and non-technical.

We’re here to create a banking experience that’s kinder to people and planet.

Unlike banks, we don’t have public or private shareholders which means we can invest 100% of our profits back into our business. As a result, our business is purpose-led, financially strong, socially responsible and always focused on our people, planet and communities.