West Midlands Combined Authority (WMCA) is seeking a Cyber Security Manager to lead and strengthen operational cyber security across a complex, multi‑supplier environment. This 12‑month fixed‑term contract will involve day‑to‑day security operations, incident response, vulnerability management, identity security and oversight of a specialist team and key security suppliers.

Responsibilities

• Operate security controls to defined Minimum Security Baselines and policies; meet SLA/SLOs for patching, vulnerability Mean Time To Remediate, identity hygiene and change success.
• Lead technical incident response (contain–eradicate–recover) and support ISIM with incident governance and reporting.
• Lead the technical Disaster Recovery posture for cyber incidents (runbooks, rehearsal/exercises, recovery validation), aligning with ISIM’s BCP/DR requirements.
• Maintain security tooling (EPP/EDR, firewalls, email/web filtering, SIEM inputs, ident...