Cyber Security Lead

Vacancy Information

• Vacancy Name: Cyber Security Lead
• Vacancy No: VN1208
• Job Type: Permanent
• Location: Hatfield (Hybrid working - 3 days in the office)
• Contract type: Permanent
• Working hours per week: 40 hours
• Level: Lead
• Final date to receive applications: 23rd January 2026

Our mission is to deliver joy in every shop, through unbeatable choice, unrivalled service, and reassuringly good value. We're Ocado Retail, a market-leading joint venture between Ocado Group and M&S, and the world's largest dedicated online supermarket,  Not only is  the only place to shop a full range of M&S food online, it's also the home to the widest online supermarket range in the UK and champion of small, independent brands.

We're also the brains behind Zoom by Ocado, our same‑day grocery delivery service.

This is an exciting opportunity for a proactive, technically‑minded, and organised Cyber Security Lead to take a leading role in running our Cyber Security Operations. You will have the opportunity to make your mark by leading and refining the Cyber Security team, and working closely with our IT, Data, and Compliance teams. The ideal candidate will review and improve policies, processes, and procedures, work with suppliers to monitor service KPIs and SLAs and strive for exceptional standards of cybersecurity engineering.

• Team Leadership: Lead and coach the Cyber Security Team, mentoring and enabling the wider IT team to become their own security technologists.
• Incident Management: Own and produce incident management procedures and runbooks to ensure effective response to security events.
• Strategy and Risk: Maintain a comprehensive understanding of the organisation's cyber security risk maturity and assist in the maintenance of a risk register for identifying and tracking security risks within business operations.
• Stakeholder Advisory: Act in an advisory capacity as a Security SME to stakeholders and project leads, liaising across the business to ensure sufficient controls are in place to mitigate known security risks.
• Project Management: Own and manage Information Security projects and initiatives.
• Vulnerability Management: Manage and coordinate penetration and vulnerability test schedules to identify weaknesses.
• Supplier Management: Strategically manage the relationships, performance, and commercial agreements with 3rd party cybersecurity tooling vendors to ensure service delivery, compliance, and optimal value.

• Experience: Must have proven experience working within an Information / Cyber Security team, having held a lead position or demonstrating the ability to step up into this key role.
• Cloud Security: Working knowledge of security in a cloud‑first environment, with prior experience of security across multiple clouds (AWS, Azure, GCP) and SaaS vendors.
• Security Frameworks: Demonstrates a deeper understanding of multiple security frameworks (e.g., NIST, ISO 27001).
• Technical Knowledge: High‑level understanding of technical security concepts, tools, and capabilities, including Zero Trust concepts.
• Tooling: Experience with security tooling such as Rapid7, MS Defender, Netskope, and Password Management Solutions.
• Threat Intelligence: Demonstrates understanding of cyber threats and how they impact the organisational risk position.

• Certifications: Has CCSP and/or CISSP, or is working towards one (or more) of these qualifications and is keen to develop skills further.
• Program Leadership: Prior experience leading an Information Security Programme would be advantageous.
• Team Building: Previous involvement in building and managing Security teams.

By joining Ocado Retail, you'll have the chance to experience life at the world's largest online retailer, work with an amazing bunch of people who challenge what's possible each day, and grow your skills and career in online retail. If that's not enough to tempt you, you'll also get access to loads of great benefits to sweeten the deal. Here's a taste of what we offer:

Health & Wellbeing: Private medical insurance with option to add your family, Digital GP appointments, market‑leading family policies,…