Manager - CCDI (Centre for Cyber Defence & Intelligence) at Financial Conduct Authority | City of Edinburgh, GB | Rezi

Manager - CCDI (Centre for Cyber Defence & Intelligence) at Financial Conduct Authority

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Financial Conduct Authority · City of Edinburgh, GB

1 months ago

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Financial Conduct Authority · City of Edinburgh, GB

a month ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Manager - CCDI (Centre for Cyber Defence & Intelligence) role.

Rezi rewrites your resume against Financial Conduct Authority's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Manager - CCDI (Centre for Cyber Defence & Intelligence) posting at Financial Conduct Authority — free, in seconds.

About the Role

The Manager will lead the FCA's Threat, Detection & Response function, the Centre for Cyber Defence and Intelligence (CCDI), within the Cyber & Information Resilience (C&IR) department. This role is crucial for modernizing cyber defense, enhancing security monitoring, detection engineering, and response capabilities in light of increasing AI and agent-based technologies. The position involves operating and maturing an intelligence-led cyber defence capability, translating threat intelligence into actionable priorities, and improving incident response.

Responsibilities

  • Lead and develop the FCA's Threat Intelligence, Detection and Incident Response capability, delivering an intelligence-led approach to cyber defence and risk reduction.
  • Drive continuous improvement of detection coverage, telemetry, response effectiveness and security operations through data-led insights, automation and effective stakeholder engagement.
  • Shape the security monitoring response to increased adoption of AI and agent-based technologies, ensuring that telemetry, detection logic and response capabilities evolve alongside the FCA’s technology environment.
  • Own the detection improvement roadmap, working closely with SOC providers, technology teams and cyber security stakeholders to deliver measurable outcomes.
  • Lead and develop internal teams and third-party partners, ensuring effective performance, service quality and continuous professional growth.
  • Establish meaningful cyber security metrics, KPIs and executive reporting to measure performance, resilience and risk reduction.
  • Build trusted relationships across the FCA and external cyber security communities to improve threat awareness, influence priorities and share best practice.
  • Ensure alignment with industry frameworks and guidance, including NIST CSF, MITRE ATT&CK, MITRE D3FEND, INFORM and NCSC standards.

Requirements

  • Experience leading Cyber Security, Security Operations, Threat Intelligence or Detection Engineering teams, including developing people and delivering results through others.
  • Solid knowledge of modern cyber threats, detection, threat intelligence and incident response, with experience managing cyber security partners and service providers.
  • Effective stakeholder management and communication skills, with the ability to translate complex technical risks, security metrics and data into clear executive insights and recommendations.
  • Advanced analytical and problem-solving skills, using data-driven approaches to improve security outcomes, operational effectiveness and cyber resilience.
  • Experience in one or more of Threat Intelligence, Security Operations, Detection Engineering, SOC Performance Management or Exposure Management, with a practical understanding of threat-informed defence methodologies, security monitoring, incident response and frameworks such as MITRE ATT&CK for adversary behaviour, D3FEND for defensive countermeasures, and INFORM for measuring defensive maturity.
  • Experience using security performance metrics, KPIs, KRIs, cyber maturity measures and operational reporting to support informed decision-making, continuous improvement and measurable cyber risk reduction.
  • Experience delivering improvements to detection coverage, signal quality, response effectiveness and cyber resilience, including the use of automation, SOAR, telemetry enrichment, attack simulation or purple teaming approaches.
  • Solid knowledge of cyber security controls across cloud, SaaS and enterprise environments, with experience using technologies such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, AWS Security Services or similar security platforms.
  • Demonstrated ability to influence senior stakeholders, communicate complex technical concepts to a range of audiences and produce high-quality governance papers and executive reporting.
  • Knowledge of operational resilience, cloud security and regulatory expectations within complex or highly regulated environments.
  • SC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting.

Skills

  • Threat Intelligence
  • Security Operations
  • Detection Engineering
  • Incident Response
  • Stakeholder Management
  • Communication
  • Analytical Skills
  • Problem-Solving
  • Data-driven Approaches
  • SOC Performance Management
  • Exposure Management
  • Threat-informed Defence Methodologies
  • Security Monitoring
  • MITRE ATT&CK
  • MITRE D3FEND
  • INFORM
  • Security Performance Metrics
  • KPIs
  • KRIs
  • Cyber Maturity Measures
  • Operational Reporting
  • Automation
  • SOAR
  • Telemetry Enrichment
  • Attack Simulation
  • Purple Teaming
  • Cloud Security Controls
  • SaaS Security Controls
  • Enterprise Security Controls
  • Microsoft Defender
  • Microsoft Sentinel
  • CrowdStrike
  • AWS Security Services
  • Operational Resilience
  • Cloud Security
  • Regulatory Expectations

Location

  • Edinburgh
  • Leeds
  • London

Work Type

  • Hybrid
  • Full-time

Experience Level

  • Manager
  • Director
  • Executive Director

Education Level

  • Relevant cyber security certifications such as CISSP, CISM, GIAC, SANS, Azure Security, AWS Security or equivalent are advantageous.

Salary/Compensations

  • National (Edinburgh and Leeds) ranging from £74,900 to 115,000
  • London from £82,300 to 125,000

Benefits

  • 28 days annual leave plus bank holidays
  • Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary
  • Private healthcare with Bupa, income protection and 24/7 Employee Assistance
  • 35 hours of paid volunteering annually
  • Flexible benefits scheme designed around your lifestyle

About the Company

  • We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective.
  • By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.
  • The FCA regulates over 35,000 financial services firms in the UK, setting standards for firms to meet and holding them to account if they do not.
  • We enable a fair and thriving financial services market for the good of consumers and the UK economy.

Equal Opportunity

  • We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best.
  • We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation.
  • If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support.
  • We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.
  • We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process.
  • In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements.