> Markdown version of [/jobs/ext/3266108-cyber-security-manager-ecliptos](https://www.wearedevelopers.com/jobs/ext/3266108-cyber-security-manager-ecliptos). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Manager - EcliptOS

- **Company:** McKinsey & Company
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Logging, Integration Frameworks, Vulnerability Analysis
- **Published:** September 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a7026ff806f111ff

## About the Role

Do you want to do work that matters, alongside supportive leaders who will help you grow faster than you ever thought possible? Are you a creative problem-solver who is energized by challenges? You've come to the right place., * Bachelor's degree in related field or equivalent working experience

 * 5+ Years of Cyber Security experience in a similar role
 * Strong ability to ensure "security by design and by default" across architectures, user stories, technical decisions, and third-party integrations
 * Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog
 * Experience interpreting and cascading central security policies, standards, and regulatory requirements into product-specific controls, and ensuring documentation is audit-ready
 * Deep knowledge of required security controls, including access control, logging and monitoring, encryption, and secure configuration
 * Experience monitoring security-relevant events, managing configuration drift, and supporting incident response efforts (triage, containment, lessons learned)
 * Experience participating in risk committees, architecture reviews, and defining/maintaining product-level security KPIs and KRIs
 * Ability to collaborate closely with product managers, engineering leads, SREs, and compliance partners, while promoting security awareness and coaching teams on secure development practices
 * Excellent communication skills to act as the primary contact for internal stakeholders (architecture, legal, privacy, risk, audit) and external parties, as well as supporting client activation discussions

## Description

Acting as the primary security point of contact throughout the product lifecycle, you will interpret and cascade central security policies, standards, and regulatory requirements into product-specific requirements, patterns, and controls.
You will be responsible for ensuring that a product complies with the firm's central information and security policies and standards. You will own the product's security posture across design, build, test, release, and operations, ensuring "security by design and by default" is applied to architectures, technical decisions, and third-party integrations.
Your work will involve maintaining and prioritizing the product's security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor security-relevant events, support incident response efforts, and act as the primary point of contact for all product-related security queries. Additionally, you will promote security awareness within the product team, provide best practice guidance to Forward Deployed Engineers, participate in governance forums, and define product-level security KPIs and KRIs.