Head of Technical Security Location: Cheltenham, Gloucestershire (hybrid working) We are seeking a highly skilled Head of Technical Security to lead the protection of our organisation’s technology environment and ensure we can operate safely, reliably, and with confidence. This senior leadership role blends strategic direction with deep technical oversight and hands-on capability when required. You will be responsible for shaping and delivering our technical security strategy, overseeing the development of secure architectures, and embedding secure‑by‑design principles across the enterprise. You will also manage a team of security architects and engineers, ensuring we continually strengthen our control posture and resilience. Key Responsibilities: Support IT and Enterprise Architecture teams in technical security decision‑making, ensuring our Azure and hybrid infrastructure remains secure, robust, and scalable. Deliver a holistic Identity strategy across Azure AD/Entra ID and hybrid environments. Drive the organisation’s security strategy and roadmap using the NIST Cybersecurity Framework (CSF), aligned with business objectives, regulatory expectations, and emerging threats. Provide technical leadership and escalation support to the Cyber Incident Response Team (CIRT), including digital forensics, investigations, and remediation guidance. Partner closely with operations, architecture, and project delivery teams to accelerate security improvements and embed secure-by-design practices. Lead external technical security engagements—such as penetration testing and red team assessments—in collaboration with the GRC function. Develop and implement technical security improvements based on internal and external audit findings. Act as a trusted advisor to senior leadership, translating complex technical risks into actionable business insight. Your Experience: Extensive experience managing technical IT or Security teams with a strong track record of delivering measurable security improvements. Deep experience working across the Microsoft ecosystem, including complex Azure and hybrid infrastructures, with a focus on control effectiveness, resilience, and cost optimisation. Strong understanding of identity, access management, and privileged access within Azure AD/Entra ID and hybrid identity models. Hands‑on experience delivering major security and IT transformation programmes (e.g., data centre migrations, physical‑to‑virtual transitions, Microsoft 365 adoption). Familiarity with security tooling including SIEM, EDR, PAM, vulnerability management, and operational best practices for service recovery and stabilisation. Demonstrated ability to collaborate across enterprise architecture, infrastructure, operations, and security functions. Experience creating technical documentation, security roadmaps, and business cases. Your Skills: Deep technical expertise in hybrid identity platforms, including Entra ID, on‑prem identity, and PAM solutions. Strong hands‑on capability with Microsoft security tooling across Defender and Sentinel (configuration, tuning, incident response, threat analytics, automation playbooks). Solid technical knowledge across cloud and infrastructure security, particularly Azure and hybrid environments. Ability to support hands-on engineering, troubleshooting and problem resolution when required. Strong understanding of security frameworks such as NIST, CIS, ISO 27001 and audit expectations. Excellent communication, documentation, and stakeholder management skills. Analytical, proactive, and outcome-driven mindset with a focus on measurable security improvement. Preferred certifications: AZ‑500, AZ‑104, TOGAF/SABSA, SC‑100, CCSP, CISSP. Spirax Group is a FTSE100 and FTSE4Good multi-national industrial engineering Group with expertise in the control and management of steam, electric thermal solutions, peristaltic pumping and associated fluid technologies. Our Purpose is to create sustainable value for all our stakeholders as we engineer a more efficient, safer and sustainable world. Our technologies play an essential role in critical industrial processes and industrial equipment across industries as diverse as Food & Beverage, Pharmaceutical & Biotechnology, Power Generation, Semiconductors and Healthcare. With customers in 165 countries, we provide the solutions that sit behind the production of many items used in daily life, from baked beans to mobile phones! Our Purpose, supported by our inclusive culture and Values, unites us, guides our decisions and inspires us everywhere that we operate. We support our colleagues to make their difference for each other as well as customers, communities, suppliers, our planet and shareholders by creating a truly equitable working environment where everyone feels included. Benefits You will receive a competitive salary (and a discretionary bonus), flexible working and excellent benefits including 27 days holiday allowance (before bank holidays), 3 days’ paid volunteering leave, comprehensive private healthcare, enhanced pension plan, life assurance, optional participation in a Share Ownership Plan, free onsite parking, flexible benefits, and access to a personal discounts’ portal. We also offer a range of additional support and benefits through our Everyone is Included Group Inclusion Plan, detailed below. Everyone is Included at Spirax Group We are passionate about creating inclusive and equitable working cultures where everyone can be themselves and achieve their full potential. For us, that means supportive teams and strong relationships where everyone’s contribution is valued - across social and cultural backgrounds, ethnicities, ages, genders, gender identities, abilities, neurodiversity, sexual orientation, religious beliefs, and everything else that makes us human and unique. We want everyone to be able to make their difference here, so we will always consider requests for flexible working. We know that everyone needs some extra help from time to time too, so we have introduced a range of additional benefits through our Group Inclusion Commitments. These include gender-neutral parental leave, 15 days of extra paid caregiver leave, paid time off and support for anyone experiencing pregnancy loss or domestic abuse, menopause-friendly workplace principles and more. Learn more at www.spiraxgroup.com/en/life-at-spirax/our-inclusive-group/our-inclusion-commitments. We are also a Disability Confident Committed Employer. If you would like to apply using this scheme, please select this option in our application form or notify our recruitment partners.