Security Engagement Manager

We are seeking a highly skilled and security-focused professional to serve as the UK Sovereign Security Engagement Manager. This role will act as the primary liaison between UK Sovereign technical security teams and our customers, ensuring transparency, trust, and proactive communication regarding the security posture of UK Sovereign environments.

The position will include responsibilities for vulnerability remediation tracking and reporting in a Plan of Action and Milestones (POAM) format — a structured method that documents identified security vulnerabilities, planned remediation steps, responsible parties, and target completion dates, ensuring accountability and progress tracking.

How will you make an impact?

• Security Posture Assessment: Collaborate closely with UK Sovereign technical teams to understand and assess the current security posture of environments.
• Vulnerability Reporting: Maintain and present vulnerability remediation status in a structured POA&M format, tracking progress against agreed timelines.
• Security Alerts: Identify and report potential security alerts to customers in accordance with contractual and compliance requirements.
• Customer Reporting: Prepare and deliver monthly security status updates to customers, including progress on scheduled remediation items.
• Information Translation & Communication: Gather detailed technical information from engineering and security teams, then convert and filter it into clear, concise, and structured updates that are accessible to both technical experts and non-technical stakeholders.
• Action Tracking: Capture customer feedback and action items during meetings, ensuring timely follow-up and resolution by technical teams.
• Compliance Alignment: Ensure security posture and remediation activities align with frameworks such as Cyber Essentials Plus, PCI DSS, ISO 27001, SOC 2 Type II.
• Remediation Oversight: Monitor and track remediation activities, ensuring alignment with agreed timelines and compliance requirements.
• Stakeholder Communication: Serve as the trusted point of contact for customers on all matters related to security posture, vulnerabilities, and remediation.
• Stress Management: Operate effectively in high-pressure, demanding situations, maintaining professionalism and clarity.
• Growth & Leadership: As the role expands, provide mentorship and leadership to additional team members.

Have you got what it takes?

• Citizenship & Clearance: UK citizenship and ability to pass SCC clearance.
• Technical Expertise: Strong technical understanding of security principles, practices, architecture, and vulnerability management.
• Compliance Knowledge: Familiarity with Cyber Essentials Plus, PCI DSS, ISO 27001, SOC 2 Type II, and similar standards.
• Communication Skills: Exceptional verbal and written communication skills, with the ability to tailor complex technical concepts for both technical and non-technical audiences.
• Customer Relations: Proven experience in customer-facing roles, ideally within security or technology sectors.
• Problem-Solving: Ability to work collaboratively to resolve issues under tight deadlines.
• Organizational Skills: Strong ability to prioritize, manage multiple tasks, and meet deadlines.
• Managerial Experience: Previous leadership or management experience is advantageous.
• Integrity and discretion when handling sensitive information.
• Resilience and adaptability in dynamic environments.
• Proactive and self-motivated with a commitment to continuous improvement.

You will have an advantage if you also have:

• Professional certifications in cybersecurity (e.g., CISSP, CISM, ISO 27001 Lead Auditor).
• Experience working with UK Sovereign or government environments.
• Familiarity with POAM processes

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID: 9477
Reporting into: Director, Cloud Information Security and Architecture
Role Type: Individual Contributor

#LI-Hybrid