Manager, Digital Risk & Cyber

Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise and enabled by advanced technology the firm helps clients to deliver with greater confidence and certainty. With over 2000 people across the UK Europe North America Asia and Australia the firm combines global insight with local understanding.

The firm works across energy and resources financial services government and public sector consumer products and retail pharmaceuticals and life sciences manufacturing and technology media and telecoms with capabilities spanning strategy transformation and operational excellence all powered by advanced technology data AI and digital innovation.

Clients value Baringas collaborative approach and the way its teams integrate seamlessly all working with a shared understanding of what matters most. The firm is known for its kind curious experts who listen closely and care deeply about client success as they help clients transform energy markets modernise financial platforms expand telecoms and digital networks through advanced data analytics enable digital services in government and unlock growth in consumer sectors.

Certified as aGreat Place to Work around the world Baringa has been recognised by the Financial Times in 22 categories of its UK Leading Management Consultants rankings and by Forbes for four consecutive years as one of the Worlds Best Management Consulting Firms.

Digital risk cybersecurityand resilience are no longer cost centres they are where value is won or lost

The Jaguar Land Rovercyber attackcost the company 196m and had a 1.9bn impact on the UK economy. The damagewasnta databreachit was an attack on the connected technology that runs the business. We protect the things which underpin our daily lives: energy water payments bankinghospitalsand critical public services and the supply chains behind them. Wedontjust advise clients; we designbuildand stand up the frameworks operating models and tooling that keep working long after we leave.

Werea specialist team scaling fast andwereindependent by design: no software to resell no audit relationship to protect so nothing shapes our advice except the problem in front of you. We work in small teams so you lead from the frontowning delivery developing the people around you and building the client relationships thatopen uprepeatwork. Quarterly promotion cycles and no quotas mean you move up whenyoureready not when a slotopens up.

Werelooking for Managers who want to own our clients hardest problems in digital risksecurityand resilienceand grow thecapabilitiesteams and relationships that solve them.

Our Digital Risk and Cyber (DRC) team helps clients secure the things that matter most from theiroverall security strategy and operating model to the specific technologies that drive value in their business. Our work is organised around two specialisms:

Digital Resilience: helping clients meet fast-moving security resilience and regulatory obligations such as the Cyber Assessment Framework (CAF)the EUs DigitalOperationalResilience Act (DORA)and EU AI Actand the UK Cyber Security and Resilience Bill.

Digital Trust:helping clients govern emerging technology and security risk includingAIcloudand post-quantum cryptography.

We also build security into our clients biggest change and transformationprogrammes andrun the regulatory and standards compliance work thatunderpins their operations.

We are independent by design. With no software to resell and no audit relationship to protect our people can give a genuinely honest viewand be trusted advisors in the truest sense.

• Own thework:Take end-to-end ownership of a workstream on complex engagementsshaping the approach running the day-to-day and being accountable for the quality and impact of what youand your team produces.
• Lead a team:Manage and develop a mixed-level team from Analysts to Senior Consultantssetting clear direction coaching in the flow of the work and being the kind ofleader people want to work with.
• Godeep andsolve:Build genuine depth in a specialism you care about and designcapabilities and tools clientsactually useusing AI to compress the high-volume work so your time goes on the judgement.
• Be the trusted advisor:Work directly with CISOs and their teamsbuildingrelationships and managing the expectations that keep delivery on track and advice landing.
• Start winning work:Spot scope and qualify opportunitiesshaping proposals alongside our PartnersandDirectors andtaking responsibility for turning strong delivery into the next piece of work.
• Help build the practice:Contribute to our propositions ourprofileand our talentputting yourself forwardto leadthe right opportunities and finding ways to create more value for clients.

We care more about the shape of your experience than a checklist. If most of the following sound like youwedlike to hear from you:

• Digital risk and cyber experience:a strongtrack recordin digital risk cybersecurityor resilience whether gained in consulting or in-house and a genuine passion for the field.
• Delivery and engagement leadership:experience owning a workstream or leading delivery in demanding client-facing environments with the judgement to keep quality high and the communication skills to engage anyone from a technology team to theexecutive team.
• People leadership:experience managingcoachinganddeveloping othersand a real interest in building teams and bringing people on.
• Client relationships:the credibility to build trusted relationships with senior client stakeholders and to turn good delivery into repeat work.
• Frameworks and standards:a goodknowledge of the standards and frameworks that shape our work for example NIST CSF ISO 27001 and the regulatory agendathe EU AI Act DORA the UK Cyber Security and Resilience Billand CAF.
• Technology and AI literacy:fluency in or real curiosity about using AI to deliverand advising clients on securing and governing it.
• Depth in one or more of our domains:Meaningful experience in at least one area weoperateinparticularly OT/ICS security CAF AI security and governance post-quantum and cryptographic agility or operational resilience.

Bonus points for:

• Certifications:ForexampleCISSP CCSP or AIGPa plus but no substitute for real-world experience.
• Building tooling and automation:Hands-on with building not just using for example agentic AI Power BI Power Apps risk quantificationmodelsor digital twins.

• Generous Annual Leave Policy:We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave fully available at the start of each addition to this we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service.

• Flexible Working:We know that the ideal work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave.

• Corporate Responsibility Days:Our world is important to us so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us.

• Wellbeing Fund:We want to encourage all employees to take charge and prioritise their own wellbeing. Weve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice.

• Profit Share Scheme:All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the companys success.

We are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity innovation and value for our clients and for our people.

You can be a part of our Great Place to Work with our commitment to women and well-being in the workplace for all.Click hereto see some of our recent awards and how weve achieved this.

We maintain high standards of environmental performance and transparency which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis - helping us to continually identify where we can improve.

We have a long legacy of supporting the communities in which we work and offer a variety of ways to contribute by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills talent and essence we aim to empower and encourage everyone in the firm to contribute to the things we care about and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have.

All applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race ethnicity religion gender gender identity or expression sexual orientation nationality disability age faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further.

For UK & EU

Your personal data will be retained by Baringa for up to two years in accordance with our UK Recruitment Privacy Notice / EU Recruitment Privacy Notice to evaluate your application and meet our legal and reporting line with the General Data Protection Regulation (GDPR) you have the right to request access to rectification or erasure (subject to legal limitations) of your personal data. For more information please contact us at

For the USA

Your personal data may be retained by Baringa for up to two years as outlined in ourRecruitment Privacy Notice (AMER & APAC) to support the recruitment process and internal reporting requirements. Where applicable and in accordance with relevant federal and state laws you may have the right to request access to or correction of your personal information. For further details please contact

For Australia & Singapore

Your personal data will be retained by Baringa for up to two years in accordance with our Recruitment Privacy Notice (AMER & APAC) to assess your application and meet applicable reporting and legal line with the Australian Privacy Act and Singapores Personal Data Protection Act (PDPA) you may have rights to access correct or request limited deletion of your personal data. For more information please contact us at