Cybersecurity Lead

Primary Location United Kingdom-London

Schedule Full-time

Application Deadline 24-Aug-2026, 10:59:00 PM

Salary (Pay Basis) 7,646.99Pound Sterling (GBP) Monthly

Grade NATO Grade G17

Clearance NATO SECRET

The post is budgeted from 1 January 2027, and the successful candidate is expected to start employment as soon as possible thereafter.

1. OVERVIEW OF DIANA

NATO DIANA is the Defence Innovation Accelerator for the North Atlantic, a NATO body dedicated to finding and accelerating innovation to provide decisive defence and security effects for the Alliance, while fostering deep-tech innovation. NATO DIANA is comprised of a Board of Directors, representing all 32 nations, and an operational team referred to as the DIANA Executive (“DX”). Operating from three offices in Europe and North America, the DX leverages a network of military end users, world-leading accelerator sites, test centres, professional mentors and experts, and Allied expertise to accelerate the most innovative technologies from across the NATO Alliance. DIANA is a dynamic, agile workplace, which strives for innovative thinking, diversity, and performance excellence across all teams. To achieve our mission, DIANA is committed to providing our people with an environment that is positive, inclusive and collaborative.

2. OVERVIEW OF THE ROLE

The Safety, Security & Resilience (SSR) Team is responsible for safeguarding DIANA’s people, information, facilities, and digital assets. The team develops and maintains proportionate frameworks, policies, controls, and assurance arrangements across cyber security, information security, physical security, safety, and security risk management to enable secure, safe, and resilient operations across DIANA. The Cybersecurity Lead is responsible for delivering DIANA’s cyber security activities, ensuring the secure and resilient operation of its cloud, digital, and business technology services, along with cyber security architectural design. The role combines hands-on technical expertise with responsibility for cyber governance, risk management, compliance, resilience, and assurance, embedding security by design across the organisation.

*Reserve candidates may be considered for similar posts in Estonia or Canada, if appropriate.*

Reporting to DIANA’s Head of Safety, Security & Resilience

Duties of this role include:

• Lead the development, implementation and continual improvement of DIANA’s cyber security, security architecture, governance framework, risk-management arrangements and assurance programme, building in security by design principles.
• Establish and manage cyber security policies, standards, control frameworks, risk registers, security metrics, and assurance documentation.
• Lead and oversee security risk assessments for DIANA Digital assets.
• Provide second-line challenge, oversight and assurance across technology projects, suppliers, cloud platforms, SaaS applications, AI solutions and operational processes, ensuring that risks are identified, assessed, treated and escalated appropriately.
• Lead cyber security incident response, assurance, and risk management activities, including for suppliers, service providers, and third-party technology partners.
• Lead internal and external audit, assurance, accreditation, and certification activities against relevant standards and assurance frameworks, including ISO/IEC 27001, NIST Cybersecurity Framework, NIST SP 800-53, Cyber Essentials Plus, CIS Benchmarks and applicable NATO security-accreditation expectations.
• Provide guidance, mentoring, or managerial leadership, as required, to enable collaboration, capability development, and successful delivery.
• Perform any other related duties as may be required.

3. ROLE REQUIREMENTS, QUALIFICATIONS AND EXPERIENCE

ESSENTIAL

The incumbent must have:

• A minimum requirement of a Bachelor’s degree at a nationally recognised/certified University in Cyber Security, Information Security, Computer Science, Information Technology, Engineering, Digital Forensics, Networks, or a closely related technical discipline and 3 years post-related experience OR exceptionally, the lack of a university degree may be compensated by at least 10 years extensive and progressive expertise in duties related to the function of the post.

NOTE: Most of DIANA’s internal work is conducted in the English language.

DESIRABLE

The following would be considered an advantage:

• A relevant postgraduate qualification, such as an MSc in Cyber Security, Information Security, Computer Science, Engineering, Digital Forensics, Artificial Intelligence, Cloud Computing, Risk Management, or a closely related discipline.

COMPETENCIES

• The incumbent must demonstrate:
• Organizational and Environmental Awareness: Understands the wider mission and considers the impact of their actions on others.
• Initiative & Responsibility: Takes ownership and accountability.
• Adaptability & Flexibility: Embraces change, adjusts priorities as needed, and continues to deliver results in evolving environments.
• Impact & Influence: Builds trust and buy in through confident and persuasive communication.
• Stakeholder Management: Builds strategic relationships and drives collaborative outcomes.
• Leading & Developing Other: Leads and develops others through coaching, empowerment, and feedback.
• Self-awareness and a Learning Mindset: Seeks opportunities to learn, reflects on experience, and applies learning to improve outcomes.

4. WHAT WE OFFER

• Genuinely meaningful work as part of the newest unit within the most successful alliance in history.
• Tax-free salary.
• Household and children’s allowances and privileges for expatriate staff including expatriation and educational allowances (where applicable) and additional home leave.
• Excellent private health insurance scheme.
• NATO pension scheme.
• Generous annual leave of 30 days plus official holidays.
• Flexible working conditions and a smoke-free office in London.
• Opportunities for learning and development.

For further information please see the full job description on our recruitment portal.