Manager, Digital Risk & Cyber

Job description

### About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding. The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation. Clients value Baringa’s collaborative approach and the way its teams integrate seamlessly – all working with a shared understanding of what matters most. The firm is known for its kind, curious experts who listen closely and care deeply about client success as they help clients transform energy markets, modernise financial platforms, expand telecoms and digital networks through advanced data analytics, enable digital services in government, and unlock growth in consumer sectors. Certified as a *Great Place to Work* around the world, Baringa has been recognised by the *Financial Times* in 22 categories of its UK Leading Management Consultants rankings, and by *Forbes* for four consecutive years as one of the World’s Best Management Consulting Firms. ## Our Digital, Risk & Cyber practice are looking for an experienced Managers, who want to build and solve, not just advise **Digital risk, cyber security and resilience are no longer cost centres – they are where value is won or lost** The Jaguar Land Rover cyber attack cost the company £196m and had a £1.9bn impact on the UK economy. The damage wasn't a data breach, it was an attack on the connected technology that runs the business. We protect the things which underpin our daily lives: energy, water, payments, banking, hospitals and critical public services – and the supply chains behind them. We don't just advise clients; we design, build and stand up the frameworks, operating models and tooling that keep working long after we leave. We're a specialist team scaling fast, and we're independent by design: no software to resell, no audit relationship to protect, so nothing shapes our advice except the problem in front of you. We work in small teams, so you lead from the front – owning delivery, developing the people around you, and building the client relationships that open up repeat work. Quarterly promotion cycles and no quotas mean you move up when you're ready, not when a slot opens up. We're looking for Managers who want to own our clients' hardest problems in digital risk, security and resilience – and grow the capabilities, teams and relationships that solve them. Our Digital Risk and Cyber (DRC) team helps clients secure the things that matter most – from their overall security strategy and operating model, to the specific technologies that drive value in their business. Our work is organised around two specialisms: **Digital Resilience**: helping clients meet fast-moving security, resilience and regulatory obligations such as the Cyber Assessment Framework (CAF), the EU’s Digital Operational Resilience Act (DORA) and EU AI Act, and the UK Cyber Security and Resilience Bill. **Digital Trust**: helping clients govern emerging technology and security risk, including AI, cloud and post-quantum cryptography. We also build security into our clients' biggest change and transformation programmes, and run the regulatory and standards compliance work that underpins their operations. We are independent by design. With no software to resell and no audit relationship to protect, our people can give a genuinely honest view – and be trusted advisors in the truest sense. ### What you will be doing - **Own the work:**Take end-to-end ownership of a workstream on complex engagements – shaping the approach, running the day-to-day, and being accountable for the quality and impact of what you and your team produces. - **Lead a team:**Manage and develop a mixed-level team, from Analysts to Senior Consultants – setting clear direction, coaching in the flow of the work, and being the kind of leader people want to work with. - **Go deep, and solve:**Build genuine depth in a specialism you care about, and design capabilities and tools clients actually use – using AI to compress the high-volume work, so your time goes on the judgement. - **Be the trusted advisor:**Work directly with CISOs and their teams, building relationships and managing the expectations that keep delivery on track and advice landing. - **Start winning work:**Spot, scope and qualify opportunities – shaping proposals alongside our Partners and Directors, and taking responsibility for turning strong delivery into the next piece of work. - **Help build the practice:**Contribute to our propositions, our profile and our talent – putting yourself forward to lead the right opportunities and finding ways to create more value for clients. ### Your skills and experience We care more about the shape of your experience than a checklist. If most of the following sound like you, we'd like to hear from you: - **Digital risk and cyber experience:** a strong track record in digital risk, cyber security or resilience, whether gained in consulting or in-house, and a genuine passion for the field. - **Delivery and engagement leadership:** experience owning a workstream or leading delivery in demanding, client-facing environments, with the judgement to keep quality high and the communication skills to engage anyone from a technology team to the executive team. - **People leadership:** experience managing, coaching and developing others – and a real interest in building teams and bringing people on. - **Client relationships:** the credibility to build trusted relationships with senior client stakeholders, and to turn good delivery into repeat work. - **Frameworks and standards:**a good knowledge of the standards and frameworks that shape our work, for example NIST CSF, ISO 27001, and the regulatory agenda – the EU AI Act, DORA, the UK Cyber Security and Resilience Bill, and CAF. - **Technology and AI literacy:**fluency in, or real curiosity about, using AI to deliver, and advising clients on securing and governing it. - **Depth in one or more of our domains:** Meaningful experience in at least one area we operate in – particularly OT/ICS security, CAF, AI security and governance, post-quantum and cryptographic agility, or operational resilience. **Bonus points for:** - **Certifications:** For example CISSP, CCSP or AIGP – a plus, but no substitute for real-world experience. - **Building tooling and automation:** Hands-on with building, not just using – for example agentic AI, Power BI, Power Apps, risk quantification models or digital twins. ## What a career at Baringa will give you ### Putting People First. ### Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: - Generous Annual Leave Policy: We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service. - Flexible Working: We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave. - Corporate Responsibility Days: Our world is important to us, so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us. - Wellbeing Fund: We want to encourage all employees to take charge and prioritise their own wellbeing. We’ve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice. - Profit Share Scheme: All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the company’s success. ### Diversity and Inclusion We are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people. ### An award-winning workplace You can be a part of our ‘Great Place to Work’ – with our commitment to women and well-being in the workplace for all. [Click here](https://www.baringa.com/en/impact/awards/) to see some of our recent awards and how we’ve achieved this. ### Using business as a force for good. We maintain high standards of environmental performance and transparency, which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1, 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis - helping us to continually identify where we can improve. We have a long legacy of supporting the communities in which we work, and offer a variety of ways to contribute, by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills, talent and time. In essence, we aim to empower and encourage everyone in the firm to contribute to the things we care about, and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have. ### Join us All applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process, ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further. ### Baringa Privacy Notices **For UK & EU** Your personal data will be retained by Baringa for up to two years, in accordance with our [UK Recruitment Privacy Notice /](https://www.baringa.com/globalassets/careers/dp-004-ukrpn---uk-recruitment-privacy-notice-pdf.pdf)