Manager, Digital Risk & Cyber

Our Digital, Risk & Cyber practice are looking for an experienced Managers, who want to build and solve, not just advise

Digital risk, cyber security and resilience are no longer cost centres – they are where value is won or lost 

The Jaguar Land Rover cyber attack cost the company £196m and had a £1.9bn impact on the UK economy. The damage wasn't a data breach, it was an attack on the connected technology that runs the business. We protect the things which underpin our daily lives: energy, water, payments, banking, hospitals and critical public services – and the supply chains behind them.  We don't just advise clients; we design, build and stand up the frameworks, operating models and tooling that keep working long after we leave. 

We're a specialist team scaling fast, and we're independent by design: no software to resell, no audit relationship to protect, so nothing shapes our advice except the problem in front of you.  We work in small teams, so you lead from the front – owning delivery, developing the people around you, and building the client relationships that open up repeat work. Quarterly promotion cycles and no quotas mean you move up when you're ready, not when a slot opens up.  

We're looking for Managers who want to own our clients' hardest problems in digital risk, security and resilience – and grow the capabilities, teams and relationships that solve them. 

Our Digital Risk and Cyber (DRC) team helps clients secure the things that matter most – from their overall security strategy and operating model, to the specific technologies that drive value in their business. Our work is organised around two specialisms: 

Digital Resilience: helping clients meet fast-moving security, resilience and regulatory obligations such as the Cyber Assessment Framework (CAF), the EU’s Digital Operational Resilience Act (DORA) and EU AI Act, and the UK Cyber Security and Resilience Bill. 

Digital Trust: helping clients govern emerging technology and security risk, including AI, cloud and post-quantum cryptography. 

We also build security into our clients' biggest change and transformation programmes, and run the regulatory and standards compliance work that underpins their operations. 

We are independent by design. With no software to resell and no audit relationship to protect, our people can give a genuinely honest view – and be trusted advisors in the truest sense.  

What you will be doing

• Own the work: Take end-to-end ownership of a workstream on complex engagements – shaping the approach, running the day-to-day, and being accountable for the quality and impact of what you and your team produces. 
• Lead a team: Manage and develop a mixed-level team, from Analysts to Senior Consultants – setting clear direction, coaching in the flow of the work, and being the kind of leader people want to work with. 
• Go deep, and solve: Build genuine depth in a specialism you care about, and design capabilities and tools clients actually use – using AI to compress the high-volume work, so your time goes on the judgement. 
• Be the trusted advisor: Work directly with CISOs and their teams, building relationships and managing the expectations that keep delivery on track and advice landing. 
• Start winning work: Spot, scope and qualify opportunities – shaping proposals alongside our Partners and Directors, and taking responsibility for turning strong delivery into the next piece of work. 
• Help build the practice: Contribute to our propositions, our profile and our talent – putting yourself forward to lead the right opportunities and finding ways to create more value for clients.  

Your skills and experience

We care more about the shape of your experience than a checklist. If most of the following sound like you, we'd like to hear from you: 

• Digital risk and cyber experience: a strong track record in digital risk, cyber security or resilience, whether gained in consulting or in-house, and a genuine passion for the field. 
• Delivery and engagement leadership: experience owning a workstream or leading delivery in demanding, client-facing environments, with the judgement to keep quality high and the communication skills to engage anyone from a technology team to the executive team. 
• People leadership: experience managing, coaching and developing others – and a real interest in building teams and bringing people on. 
• Client relationships: the credibility to build trusted relationships with senior client stakeholders, and to turn good delivery into repeat work. 
• Frameworks and standards: a good knowledge of the standards and frameworks that shape our work, for example NIST CSF, ISO 27001, and the regulatory agenda – the EU AI Act, DORA, the UK Cyber Security and Resilience Bill, and CAF. 
• Technology and AI literacy: fluency in, or real curiosity about, using AI to deliver, and advising clients on securing and governing it. 
• Depth in one or more of our domains: Meaningful experience in at least one area we operate in – particularly OT/ICS security, CAF, AI security and governance, post-quantum and cryptographic agility, or operational resilience. 

Bonus points for: 

• Certifications: For example CISSP, CCSP or AIGP – a plus, but no substitute for real-world experience. 
• Building tooling and automation: Hands-on with building, not just using – for example agentic AI, Power BI, Power Apps, risk quantification models or digital twins.

What a career at Baringa will give you 

Putting People First.

Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: 

• Generous Annual Leave Policy: We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service. 

• Flexible Working: We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave. 

• Corporate Responsibility Days: Our world is important to us, so all our employees get 3 every year