Construction - IT / Cyber Security Lead

About the company

Role Purpose We are seeking an experienced and proactive Cyber Security/IT Lead to join our Group IT function. This is a pivotal technical and leadership role within the company, responsible for safeguarding the company's IT infrastructure, driving security policy and regulatory compliance, and providing senior-level expertise across the entire IT environment. Working closely with the Group IT Manager, you will serve as the organisation's security subject-matter expert, act as an escalation point for the IT Helpdesk Engineers and maintain an effective relationship with the external Managed Service Provider (MSP) ensuring the overall health, security, and resilience of the IT estate.

Your tasks

Cyber Security & Infrastructure Design, implement and maintain the organisation’s cyber security posture across network, server and cloud environments. Manage and administer firewalls (SonicWall UTM), endpoint detection (Huntress EDR), ESET Antivirus, email archiving (Barracuda Cloud Archiving), Datto/INKY email security, ManageEngine Endpoint Central and ITSM tools, and other related security solutions. Oversee Microsoft Azure AD / Entra ID and Microsoft 365 security configurations, policies and conditional access controls, while administering and maintaining on-premises server infrastructure and virtualisation environments (Hyper-V). Monitor the IT environment for threats, vulnerabilities and anomalies, taking proactive and reactive remedial action. Administer and optimise the ManageEngine suite for endpoint management, patch management, ITSM and network monitoring. Own the security incident response process, including triage, investigation, containment, remediation and documentation, and maintain oversight of network architecture, segmentation, VPNs and connectivity across all company sites.

Requirements

Essential Criteria A minimum of 5 years' hands-on experience in an IT Security, IT Infrastructure, or similar technical role.

Practical knowledge of NIS2 and/or ISO 27001 compliance frameworks and their implementation in a real-world environment.

Demonstrable experience creating, reviewing, and governing IT Security Policies and associated documentation.

Strong, demonstrable knowledge of firewalls, network security, VPNs, and UTM appliances - SonicWall experience is highly advantageous.

Proven experience with Microsoft Azure AD / Entra ID and Microsoft 365 security administration and hardening.

Solid understanding of Microsoft Azure Server infrastructure, Windows Servers and Virtualization (Hyper-V).

Experience working with or managing third-party MSPs, including SLA oversight and service escalation.

Strong analytical and problem-solving skills with the ability to manage competing priorities under pressure.

Excellent written and verbal communication skills, able to convey technical information clearly to non-technical stakeholders.