Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Internal and External Threat Intelligence Manager role.

Rezi rewrites your resume against Metro Bank PLC's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Internal and External Threat Intelligence Manager posting at Metro Bank PLC — free, in seconds.

About the Role

At Metro Bank, we believe the best banking experience starts with people who genuinely care. We’re not just delivering banking services - we’re building trust through authentic connections. Here, our people come first; our colleagues are part of a team that values individuality, collaboration, and long-standing relationships. We are also all about balance so most of our jobs offer the opportunity for hybrid working built around your role and home life, wherever possible.

Responsibilities

Deliver timely, relevant, and accurate specialist cyber threat intelligence outputs aligned to agreed intelligence requirements.
Translate external and internal threat information into tactical and operational intelligence for various security teams.
Maintain assessments of threat actors, campaigns, sectors, and emerging threats relevant to financial services, including AI-enabled cyber activity.
Produce clear CTI reporting, briefings, and recommendations to help stakeholders prioritize detection, response, remediation, and control improvement.
Support insider risk, fraud, physical security, investigations, HR, Legal, and Risk teams with relevant intelligence and context.
Contribute intelligence-led input into discussions on horizon threats, AI-enabled attack techniques, and high-risk vulnerabilities.
Operate and suggest improvements to CTI processes, tooling, source management, reporting standards, and metrics.
Support operational management of CTI suppliers, feeds, and intelligence-sharing relationships.
Promote consistent analytical standards through peer review, good practice sharing, and clear documentation.
Provide evidence, insight, and management information to support senior manager ownership of cyber defence strategy, risk posture, regulatory engagement, and executive reporting.

Requirements

A minimum of 6-8 years’ experience within cyber security, threat intelligence, security operations, incident response, vulnerability management, or a closely related discipline.
Recognised industry qualification such as CISSP, CISM, CISMP, GCTI, GCIH, GCIA, GCFA, or equivalent experience.
Experience with threat intelligence platforms, OSINT tools, reporting frameworks, and intelligence-sharing communities is highly desirable.
Experience with threat intelligence platforms, OSINT tools, and reporting for both technical and executive audiences.
Strong understanding of cyber threat intelligence lifecycle principles, including direction, collection, processing, analysis, dissemination, and feedback.
Strong understanding of threat actor behaviours, MITRE ATT&CK, cyber kill chain concepts, intelligence confidence levels, source reliability, and analytical bias.
Knowledge of the financial services threat landscape, including cyber crime, ransomware, supply chain compromise, credential theft, fraud-enabling cyber activity, AI-enabled threats, and other emerging technology risks.
Awareness of insider and internal threat indicators, control environments, and investigation support needs.
Understanding of horizon scanning methods and emerging technology threat themes, including malicious use of AI, synthetic identity, deepfake-enabled social engineering, automated reconnaissance, and AI-assisted phishing or malware development.
Knowledge of SOC operations, detection engineering, incident response, vulnerability management, cloud security, identity, and data protection controls.
Understanding of regulatory expectations relevant to cyber resilience, operational resilience, risk management, and evidence-based control improvement.

Skills

Cyber threat intelligence
Threat intelligence platforms
OSINT tools
Reporting frameworks
Intelligence-sharing communities
MITRE ATT&CK
Cyber kill chain concepts
Financial services threat landscape
AI-enabled threats
Insider threat indicators
Horizon scanning
SOC operations
Detection engineering
Incident response
Vulnerability management
Cloud security
Identity and data protection controls
Cyber resilience
Operational resilience
Risk management

Location

AMAZE Central - Holborn
Greater London

Work Type

Hybrid working

Experience Level

6-8 years

Education Level

CISSP
CISM
CISMP
GCTI
GCIH
GCIA
GCFA
Equivalent experience

Salary/Compensations

Competitive salary
Discretionary annual bonus

Benefits

Generous holiday allowance
Attractive pension scheme
Healthcare
Life assurance
Colleague discounts
Training for success
Internal opportunities for career progression

About the Company

Metro Bank is a bank that believes the best banking experience starts with people who genuinely care.
We’re building trust through authentic connections.
Our people come first; our colleagues are part of a team that values individuality, collaboration, and long-standing relationships.

Equal Opportunity

Diverse teams really are the best teams.
We know that candidates (especially women, research tells us) may be put off applying for a job unless they can tick every box.
We also know that ‘normal’ office hours aren’t always doable, and while we can’t accommodate every flexible working request we are happy to be asked.
So if you are excited about working with us and think you can do much of what we are looking for but aren’t sure if you are 100% there yet… why not give it a whirl?