Cyber Delivery Lead

Expleo is a trusted partner for end‑to‑end, integrated engineering, quality services, and management consulting for digital transformation. We support organisations in harnessing technological change to deliver innovation, improve resilience, and operate securely within regulated and operationally critical environments.

As part of the Expleo UK Cybersecurity Practice, you will support clients in the delivery of complex cyber and security portfolios aligned to regulatory frameworks, critical national infrastructure expectations, and long‑term investment programmes. The role provides senior technical leadership and delivery assurance across cyber and security initiatives, acting as a trusted advisor and technical authority to client leadership teams.

You will ensure cyber initiatives are securely designed, effectively mobilised, appropriately governed, and delivered in line with organisational risk appetite, regulatory obligations, and operational priorities. This is a senior, client‑facing consulting role requiring autonomy, strong technical credibility, clear communication, and the ability to provide concise, decision‑ready advice to senior stakeholders.

• Provide senior technical leadership and delivery assurance across client cyber and security portfolios.
• Act as the technical authority and delivery lead for agreed cyber initiatives.
• Ensure cyber programmes and projects are securely designed, mobilised, governed, and delivered in line with client risk appetite and regulatory expectations.
• Support large‑scale cyber investment programmes by providing technical direction across design, build, delivery, and transition into business‑as‑usual operations.
• Lead and coordinate CAF and eCAF readiness activities across cyber portfolios.
• Interpret and map CAF/eCAF control requirements, define remediation actions, and establish evidence‑led assurance approaches.
• Develop a clear technical view of target state, control gaps, remediation priorities, and assurance expectations.
• Provide technical input into cyber roadmaps, including sequencing, high‑risk dependencies, critical milestones, and delivery priorities.
• Work in partnership with project, programme, and transformation teams to shape delivery sequencing and manage dependencies.
• Ensure cyber initiatives align with governance, risk, compliance, and regulatory obligations.
• Embed required security controls into solution design, delivery activity, and operational handover.
• Provide technical oversight of suppliers and third parties delivering cyber capabilities.
• Support supplier mobilisation, validate deliverables, and confirm acceptance criteria and assurance obligations.
• Act as a senior technical coordination point across architecture, operations, transformation, and business stakeholders.
• Align technical priorities, manage trade‑offs, and escalate design, delivery, or assurance decisions as required.
• Provide portfolio‑level insight into cyber risks, dependencies, and constraints, highlighting resilience and regulatory impacts.
• Support senior decision‑making through clear, concise advice on cyber priorities, delivery risk, and investment trade‑offs.
• Support structured transition of cyber capabilities into operational teams, ensuring ownership, support models, and processes are clearly defined.
• Contribute to effective change management and adoption across technology, process, and people.
• Maintain appropriate documentation and evidence‑based assurance mechanisms across cyber portfolios.
• Operate independently as a subject matter expert, determining delivery approach, stakeholder engagement, and cadence required to achieve outcomes.

• Relevant education or industry‑recognised certifications in cybersecurity, information security, technology delivery, risk management, or programme delivery.
• Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, NCSC CAF experience, Security+, CySA+, PRINCE2, MSP, Agile, or equivalent professional experience.
• Experience working in regulated, operationally critical, or critical national infrastructure environments is highly beneficial.

• Strong experience leading or assuring cyber delivery across complex portfolios or transformation programmes.
• Strong understanding of cyber governance, risk, compliance, and assurance in regulated environments.
• Practical knowledge of CAF and/or eCAF readiness, control interpretation, evidence management, and remediation planning.
• Ability to provide technical leadership from mobilisation through to transition into BAU.
• Ability to define and validate cyber scope, priorities, dependencies, risks, and control expectations.
• Strong understanding of security architecture, technical assurance, and control implementation.
• Ability to translate regulatory and risk requirements into practical delivery actions and measurable outcomes.
• Experience contributing to cyber roadmaps, delivery plans, milestone sequencing, and portfolio‑level decision‑making.
• Strong supplier and third‑party oversight capability.
• Strong stakeholder management skills, including influencing senior stakeholders and managing trade‑offs.
• Ability to produce high‑quality written outputs, assurance material, executive briefings, and decision papers.
• Strong delivery discipline and ability to operate with minimal supervision.
• Experience supporting sustainable transition into BAU, including ownership, support models, and operational readiness.

• Experience supporting large‑scale regulated investment programmes or resilience initiatives.
• Experience operating as a senior technical partner to CIOs, Heads of Cyber, or IT Transformation leadership.
• Experience developing cyber portfolio views, assurance dashboards, or executive‑level reporting.
• Experience supporting cyber capability development or strategic security platform implementation.
• Experience embedding evidence‑led assurance mechanisms across delivery.
• Experience supporting organisational change, adoption, and cyber capability transition.
• Experience working within secure collaboration and documentation environments.
• Experience handling confidential client information in line with security, data protection, and NDA requirements.

• Proven experience in senior cyber delivery, cyber assurance, or cyber technical authority roles.
• Experience supporting cyber portfolios or transformation programmes in regulated or operationally critical environments.
• Experience with CAF, eCAF, NIS, ISO 27001, NIST CSF, or equivalent frameworks.
• Experience defining technical priorities, roadmaps, control gaps, and remediation activities.
• Experience supporting regulatory, audit, or assurance readiness.
• Experience working with senior IT, cyber, architecture, operations, and transformation stakeholders.
• Experience managing cyber risks, dependencies, constraints, and delivery trade‑offs at portfolio or programme level.
• Experience overseeing suppliers or delivery partners implementing cyber capabilities.
• Experience supporting transition into BAU, including operating models, handover planning, and service ownership.