{"id":1968251,"url":"https://alion.io/job/fca-manager-ccdi-centre-for-cyber-defence-intelligence","title":"Manager - CCDI (Centre for Cyber Defence & Intelligence)","company":{"id":1753788,"name":"FCA","domain":"fca.org.uk","url":"https://alion.io/company/fca-org-uk","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Leeds, United Kingdom","Edinburgh, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":74900,"max":115000,"currency":"GBP","period":"year","gross":null,"usd_annual":153037},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"NIST CSF","optional":false}],"status":"closed","first_seen_at":"2026-10-06T18:12:12Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-25T21:24:46Z","board_verified":false,"closed_at":"2026-10-25T21:24:46Z","days_open":19,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":19},"description":"Job title: Manager - CCDI (Centre for Cyber Defence & Intelligence)\nDivision: Operations\nDepartment: Cyber & Information Resilience (C&IR)\n Salary: National (Edinburgh and Leeds) ranging from £74,900 to 115,000 andLondon from £82,300 to £125,000 (salary offered will be based on skills and experience)\nThis role is graded as: Manager, Regulatory\nYour external recruitment contact is Raimonda Stankute via \nYour internal recruitment contact is Lauren McHale via \nApplications must be submitted through our online portal. Applications sent via social media or email will not be accepted.\nAbout the FCA and team \nWe regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.\nWe are recruiting a Manager to lead the FCA's Threat, Detection & Response function, the Centre for Cyber Defence and Intelligence, part of Cyber & Information Resilience (C&IR) at the FCA. This is an exciting time to join the function as the FCA increases its adoption of AI and agent-based technologies. These developments create opportunities to modernise cyber defence, while also requiring a significant uplift in security monitoring, telemetry, detection engineering and response capabilities to manage new and evolving risks.\nThe FCA regulates over 35,000 financial services firms in the UK, setting standards for firms to meet and holding them to account if they do not. We enable a fair and thriving financial services market for the good of consumers and the UK economy. The CCDI Manager will operate and mature an intelligence-led cyber defence capability, translating current threat intelligence into monitoring priorities, detection improvements, exposure insight and measurable improvement in incident response. The role links Threat Intelligence, Security Operations, Detection Engineering, Cyber Assurance and Technology teams, including outsourced partners and maintains a data-driven view of detection effectiveness, response performance, service outcomes and coverage gaps.\nRole responsibilities\nLead and develop the FCA's Threat Intelligence, Detection and Incident Response capability, delivering an intelligence-led approach to cyber defence and risk reduction\nDrive continuous improvement of detection coverage, telemetry, response effectiveness and security operations through data-led insights, automation and effective stakeholder engagement.\nShape the security monitoring response to increased adoption of AI and agent-based technologies, ensuring that telemetry, detection logic and response capabilities evolve alongside the FCA’s technology environment.\nOwn the detection improvement roadmap, working closely with SOC providers, technology teams and cyber security stakeholders to deliver measurable outcomes\nLead and develop internal teams and third-party partners, ensuring effective performance, service quality and continuous professional growth\nEstablish meaningful cyber security metrics, KPIs and executive reporting to measure performance, resilience and risk reduction\nBuild trusted relationships across the FCA and external cyber security communities to improve threat awareness, influence priorities and share best practice\nEnsure alignment with industry frameworks and guidance, including NIST CSF, MITRE ATT&CK, MITRE D3FEND, INFORM and NCSC standards\nSkills required\nMinimum:\nExperience leading Cyber Security, Security Operations, Threat Intelligence or Detection Engineering teams, including developing people and delivering results through others\nSolid knowledge of modern cyber threats, detection, threat intelligence and incident response, with experience managing cyber security partners and service providers\nEffective stakeholder management and communication skills, with the ability to translate complex technical risks, security metrics and data into clear executive insights and recommendations\nAdvanced analytical and problem-solving skills, using data-driven approaches to improve security outcomes, operational effectiveness and cyber resilience\nEssential:\nExperience in one or more of Threat Intelligence, Security Operations, Detection Engineering, SOC Performance Management or Exposure Management, with a practical understanding of threat-informed defence methodologies, security monitoring, incident response and frameworks such as MITRE ATT&CK for adversary behaviour, D3FEND for defensive countermeasures, and INFORM for measuring defensive maturity.\nExperience using security performance metrics, KPIs, KRIs, cyber maturity measures and operational reporting to support informed decision-making, continuous improvement and measurable cyber risk reduction\nExperience delivering improvements to detection coverage, signal quality, response effectiveness and cyber resilience, including the use of automation, SOAR, telemetry enrichment, attack simulation or purple teaming approaches\nSolid knowledge of cyber security controls across cloud, SaaS and enterprise environments, with experience using technologies such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, AWS Security Services or similar security platforms\nDemonstrated ability to influence senior stakeholders, communicate complex technical concepts to a range of audiences and produce high-quality governance papers and executive reporting\nKnowledge of operational resilience, cloud security and regulatory expectations within complex or highly regulated environments\nRelevant cyber security certifications such as CISSP, CISM, GIAC, SANS, Azure Security, AWS Security or equivalent are advantageous\nBenefits\n28 days annual leave plus bank holidays\nNon-contributory pension (8-12% depending on age) and life assurance at eight times your salary\nPrivate healthcare with Bupa, income protection and 24/7 Employee Assistance\n35 hours of paid volunteering annually\nColleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices. A flexible benefits scheme designed around your lifestyle\nFor a full list of our benefits and our recruitment process as a whole visit our benefits page.\nOur values and culture\nOur colleagues are the key to our success as a regulator. We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best. We believe that our differences and similarities enable us to be a better organisation - one that makes better decisions, drives innovation and delivers better regulation.\nIf you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support.\nWe welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.\nDisability confident: our hiring approach \nWe’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements.\nUseful information and timelines\nTimeline:\nJob advert closes: Midnight, 20th October 2026\nCV Review/Shortlist: 22nd October 2026\nFirst stage interviews: w/c 26th October 2026\nAssessments: w/c 2nd November 2026\nSecond stage interviews: w/c 16th November 2026\nYour Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time. \nSC Clearance is required for this role (SC Guidance) - you will hold or will be required to obtain Security Check (SC) level vetting","description_format":"text","description_chars":8059,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Central Banks & Financial Regulators"],"lifecycle":[{"event":"open","at":"2026-10-06T18:12:12Z"},{"event":"close","at":"2026-10-25T21:24:46Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":153037,"is_top_pay":false},"html_url":"https://alion.io/job/fca-manager-ccdi-centre-for-cyber-defence-intelligence","json_url":"https://alion.io/job/fca-manager-ccdi-centre-for-cyber-defence-intelligence.json","meta":{"generated_at":"2026-10-25T23:22:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32997,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1753788},"rest":"https://alion.io/mcp/rest/get_company?id=1753788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffca-manager-ccdi-centre-for-cyber-defence-intelligence"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffca-manager-ccdi-centre-for-cyber-defence-intelligence"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffca-manager-ccdi-centre-for-cyber-defence-intelligence"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fca-manager-ccdi-centre-for-cyber-defence-intelligence\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffca-manager-ccdi-centre-for-cyber-defence-intelligence"}]}