Information Security Manager

Information Security Manager | Hybrid | Permanent

I'm currently working with a growing organisation looking to appoint an experienced Information Security Manager to lead and mature their security function.

This is a hands-on leadership role where you'll take ownership of information security governance, risk management, security operations, compliance, and security strategy while acting as the key security advisor to both technical and business stakeholders.

• Lead and manage the organisation's Information Security Management System (ISMS) in line with ISO 27001.
• Drive security governance, risk management, and compliance activities.
• Own and manage external audits, certifications, and security assurance programmes.
• Act as the primary lead for cyber security incident management and response.
• Partner with technology teams to ensure secure-by-design principles are embedded across projects and platforms.
• Develop security policies, standards, and controls.
• Manage third-party and supplier security risk assessments.
• Deliver security awareness initiatives across the business.
  
  Influence senior stakeholders and contribute to the overall security strategy and roadmap.

• Previous experience as an Information Security Manager, Cyber Security Manager, Security Governance Manager, Information Assurance Manager, Cyber Risk Manager, or similar.
• Strong knowledge of ISO 27001 and security governance frameworks.
• Experience managing Cyber Essentials Plus certification activities.
• Proven background in security risk management, security operations, and incident response.
• Experience developing security policies, standards, and control frameworks.
• Ability to engage and influence stakeholders at all levels of the organisation.
• CISSP (or equivalent) preferred.
• Supplier and third-party security review experience.
• C|CISO or equivalent leadership certification.

• Up to £85,000
• Hybrid role (2-3 days P/W on-site in Basingstoke)