Cyber Security Service Performance Manager managing the delivery of cyber security services within TfL. Focusing on service transition, contract management, and stakeholder engagement.
Responsibilities
the delivery of services within your portfolio, managing suppliers and internal teams to agreed service level targets and ensuring compliance with contracts and operational level agreements, improving resilience and supplier accountability.
the end to end delivery of cyber security services, including detection, triage, escalation, and resolution activities, ensuring alignment with business‑critical security objectives and minimizing operational risk and business impact.
the effective assessment of risks in service improvements and for developing mitigation strategies, reducing exposure and supporting continuous service maturity.
the implementation of service design for new or changed services, supporting projects during transition into the live environment to ensure smooth on-boarding and consistent service integration.
building and maintaining relationships with key stakeholders, understanding changes in priorities or business demand, and mitigating threats identified, thereby strengthening alignment and stakeholder confidence.
managing MSSP and vendor relationships, measuring performance against defined SLAs, ensuring trends are monitored, interpreted, and escalated appropriately to improve supplier accountability, strengthen resilience, and reduce contractual risk.
overseeing internal OLAs across cyber operations, IT/OT technology functions, and business teams, enhancing collaboration, reducing bottlenecks, and enabling faster resolution of incidents and service issues.
the Knowledge & Service Request Function within Service Operations, ensuring outward delivery to service ownership areas, thereby improving transparency, consistency, and user satisfaction.
Requirements
Bachelor's or Master's Degree in Computer Science, Information Systems, or other related discipline (or corresponding professional experience)
Strong understanding of ITIL principles and the service lifecycle management.
ITIL v4 qualifications.
Knowledge of managing incident, problem and request fulfillment processes.
Familiarity of OLAs & SLA management, including service reporting.
Exposure to supplier management, including contract and performance oversight.
Sound understanding of common cyber threats (phishing, ransomware, malware, insider risks etc .)
Familiarity with security response tooling, such as antivirus, firewalls, SIEM or endpoint protection.
Broad knowledge of Technology and Data Services.
Benefits
Final salary pension scheme
Free travel for you on the TfL network
Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket
30 days annual leave plus public and bank holidays
Support in quality and information security management, optimizing processes in collaboration with departments. Create reports and help maintain documentation ensuring up - to - date records.
Workday Security Consultant serving as bridge between HR functional area and IT for technology solutions. Involves analysis, development, and maintenance of HRIS solutions.
IT Security Architect responsible for building security concepts and enhancing company - wide safety measures. Contributes to reliable global software solutions in an international team context.
Junior Implementation & Support Engineer in cybersecurity working with global customers and hands - on implementation projects. Join Secomea's US team in a hybrid role for increased exposure.
Cybersecurity Engineer responsible for managing Container vulnerabilities and cybersecurity capabilities. Involves design, testing, and implementation of security technologies.
Cybersecurity Engineer developing and maintaining cybersecurity capabilities for safeguarding information systems. Collaborating on technology projects from requirements to deployment for Truist.
Senior Product Security Engineer at Vercel focusing on product security initiatives across various platforms. Driving security - first culture while ensuring core infrastructure is secure and robust.