Cybersecurity - Manager

About CFGI

CFGI is a global consulting firm that helps organisations navigate complex business challenges with confidence. With a strong presence in the UK, we partner with companies across industries to deliver best-in-class advisory services in accounting, risk, cyber security, technology, and business transformation.

We pride ourselves on combining technical expertise with a practical, hands-on approach, helping our clients strengthen resilience, meet regulatory requirements, and stay ahead in an increasingly digital and risk-driven landscape.

Technical and Domain Experience

• Conduct cybersecurity maturity and risk assessment and for clients.
• Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments.
• Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors.
• Build risk management practices for clients, including policies, procedures, Risk Register, etc.
• Previous experience as a systems administrator, systems engineer, or security analyst.
• Understanding of operating system hardening principles, network design principles, and systems security.
• Guide clients in establishing cybersecurity policies, standards, and procedures.
• Manage cybersecurity training & awareness services for clients from design to implementation.
• Understanding of security analysis, security events, and penetration testing.

Soft Skills

• Strong interpersonal and communication skills; experience with cross-cultural communications.
• Calmness and clarity of thought under pressure and ability to maintain positive attitude.
• Agile and flexible, capable of dealing with ambiguity, and confronting challenges and opportunities with speed, endurance, and decisiveness.
• Confidence to manage upwards, provide forward thinking ideas and actively participate in improving CFGI’s cyber offering.

Technical Qualifications and Certifications

• Industry certifications are preferred, but not required: CISSP, CISM, etc.
• Technology specific qualifications in technology or security solutions.

Experience

• Whilst we will judge the quality of candidates not their time-served in the industry, a good gauge for this role would be around 5 years’ experience in technology and security related fields.
• Your experience does not have to be purely cyber security consulting. We believe individuals with practical skillsets from in-house roles, broader technology management or GRC, for example, would be well placed in our team.
• We know great candidates bring a mix of skills and experiences, you don’t need to have done everything listed in this job description to apply.