Manager - CCDI (Centre for Cyber Defence & Intelligence)
Financial Conduct Authority · City of Edinburgh, GB
a month agoImpress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Manager - CCDI (Centre for Cyber Defence & Intelligence) role.
Rezi rewrites your resume against Financial Conduct Authority's job description. Free.

Tailor your resume to this Manager - CCDI (Centre for Cyber Defence & Intelligence) role.
Rezi rewrites your resume against Financial Conduct Authority's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Manager - CCDI (Centre for Cyber Defence & Intelligence) posting at Financial Conduct Authority — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Manager - CCDI (Centre for Cyber Defence & Intelligence) posting at Financial Conduct Authority — free, in seconds.
About the Role
The Manager will lead the FCA's Threat, Detection & Response function, the Centre for Cyber Defence and Intelligence (CCDI), within the Cyber & Information Resilience (C&IR) department. This role is crucial for modernizing cyber defense, enhancing security monitoring, detection engineering, and response capabilities in light of increasing AI and agent-based technologies. The position involves operating and maturing an intelligence-led cyber defence capability, translating threat intelligence into actionable priorities, and improving incident response.
Responsibilities
- Lead and develop the FCA's Threat Intelligence, Detection and Incident Response capability, delivering an intelligence-led approach to cyber defence and risk reduction.
- Drive continuous improvement of detection coverage, telemetry, response effectiveness and security operations through data-led insights, automation and effective stakeholder engagement.
- Shape the security monitoring response to increased adoption of AI and agent-based technologies, ensuring that telemetry, detection logic and response capabilities evolve alongside the FCA’s technology environment.
- Own the detection improvement roadmap, working closely with SOC providers, technology teams and cyber security stakeholders to deliver measurable outcomes.
- Lead and develop internal teams and third-party partners, ensuring effective performance, service quality and continuous professional growth.
- Establish meaningful cyber security metrics, KPIs and executive reporting to measure performance, resilience and risk reduction.
- Build trusted relationships across the FCA and external cyber security communities to improve threat awareness, influence priorities and share best practice.
- Ensure alignment with industry frameworks and guidance, including NIST CSF, MITRE ATT&CK, MITRE D3FEND, INFORM and NCSC standards.
Requirements
- Experience leading Cyber Security, Security Operations, Threat Intelligence or Detection Engineering teams, including developing people and delivering results through others.
- Solid knowledge of modern cyber threats, detection, threat intelligence and incident response, with experience managing cyber security partners and service providers.
- Effective stakeholder management and communication skills, with the ability to translate complex technical risks, security metrics and data into clear executive insights and recommendations.
- Advanced analytical and problem-solving skills, using data-driven approaches to improve security outcomes, operational effectiveness and cyber resilience.
- Experience in one or more of Threat Intelligence, Security Operations, Detection Engineering, SOC Performance Management or Exposure Management, with a practical understanding of threat-informed defence methodologies, security monitoring, incident response and frameworks such as MITRE ATT&CK for adversary behaviour, D3FEND for defensive countermeasures, and INFORM for measuring defensive maturity.
- Experience using security performance metrics, KPIs, KRIs, cyber maturity measures and operational reporting to support informed decision-making, continuous improvement and measurable cyber risk reduction.
- Experience delivering improvements to detection coverage, signal quality, response effectiveness and cyber resilience, including the use of automation, SOAR, telemetry enrichment, attack simulation or purple teaming approaches.
- Solid knowledge of cyber security controls across cloud, SaaS and enterprise environments, with experience using technologies such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, AWS Security Services or similar security platforms.
- Demonstrated ability to influence senior stakeholders, communicate complex technical concepts to a range of audiences and produce high-quality governance papers and executive reporting.
- Knowledge of operational resilience, cloud security and regulatory expectations within complex or highly regulated environments.
- SC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting.
Skills
- Threat Intelligence
- Security Operations
- Detection Engineering
- Incident Response
- Stakeholder Management
- Communication
- Analytical Skills
- Problem-Solving
- Data-driven Approaches
- SOC Performance Management
- Exposure Management
- Threat-informed Defence Methodologies
- Security Monitoring
- MITRE ATT&CK
- MITRE D3FEND
- INFORM
- Security Performance Metrics
- KPIs
- KRIs
- Cyber Maturity Measures
- Operational Reporting
- Automation
- SOAR
- Telemetry Enrichment
- Attack Simulation
- Purple Teaming
- Cloud Security Controls
- SaaS Security Controls
- Enterprise Security Controls
- Microsoft Defender
- Microsoft Sentinel
- CrowdStrike
- AWS Security Services
- Operational Resilience
- Cloud Security
- Regulatory Expectations
Location
- Edinburgh
- Leeds
- London
Work Type
- Hybrid
- Full-time
Experience Level
- Manager
- Director
- Executive Director
Education Level
- Relevant cyber security certifications such as CISSP, CISM, GIAC, SANS, Azure Security, AWS Security or equivalent are advantageous.
Salary/Compensations
- National (Edinburgh and Leeds) ranging from £74,900 to 115,000
- London from £82,300 to 125,000
Benefits
- 28 days annual leave plus bank holidays
- Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary
- Private healthcare with Bupa, income protection and 24/7 Employee Assistance
- 35 hours of paid volunteering annually
- Flexible benefits scheme designed around your lifestyle
About the Company
- We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective.
- By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.
- The FCA regulates over 35,000 financial services firms in the UK, setting standards for firms to meet and holding them to account if they do not.
- We enable a fair and thriving financial services market for the good of consumers and the UK economy.
Equal Opportunity
- We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best.
- We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation.
- If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support.
- We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.
- We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process.
- In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements.