Information Technology Security Manager

Location:

Homebased (With an expectation of weekly travel to one of our UK Sites). (London, Cambridgeshire, West Yorkshire, Lincolnshire, Manchester)

We are seeking an experienced Manager, IT Security (International) to help strengthen and advance our global cybersecurity program across a complex, multi-country enterprise.

This is a hands-on individual contributor role with accountability for regional IT security outcomes and coordination of security contractors. The successful candidate will serve as a trusted cybersecurity subject matter expert, partnering closely with IT Operations, Infrastructure, Applications, and other stakeholders to identify and mitigate risk, respond to security incidents, and continuously improve the organization's security posture.

The role combines security operations, incident response, vulnerability management, security architecture, investigations, compliance, and emerging technology considerations—including the secure use of AI and data privacy.

• Deploy, configure, tune, and monitor security technologies including SIEM, IDS/IPS, MDR/XDR, CSPM, email security, firewalls, network security infrastructure, and other security platforms.
• Participate as a member of a global cybersecurity team supporting a multi-organization, multi-country environment.
• Lead investigations into security events, determine root cause, evaluate alerts and anomalous activity, and improve detection capabilities while minimizing false positives and negatives.
• Conduct forensic analysis of network traffic, memory and disk acquisitions, malware, security logs, operating systems, and other digital evidence.
• Investigate cybersecurity incidents and breaches and ensure appropriate documentation, evidence preservation, remediation, and follow-up.
• Monitor the evolving threat landscape and provide guidance on cybersecurity technologies, capabilities, and security architecture.
• Participate in security architecture reviews for new projects and ensure proposed solutions align with established security and risk requirements.
• Support vulnerability assessments, penetration testing, security audits, and remediation initiatives.
• Partner with IT Infrastructure, IT Operations, and IT Applications teams to identify and remediate vulnerabilities and strengthen overall security controls.
• Develop and maintain security standards, procedures, technical documentation, and best practices.
• Contribute to the development and maintenance of IT security policies and organizational standards.
• Support vendor due diligence and third-party risk management activities for IT vendors and contractors.
• Support internal and external audits and compliance activities related to requirements such as SOX, GDPR, and CCPA.
• Participate in disaster recovery and business continuity planning and testing.
• Support cybersecurity awareness initiatives, including security training and phishing simulations.
• Help evaluate and implement appropriate security practices for AI systems, tools, and emerging technologies.
• Collaborate with technical and business stakeholders to communicate cybersecurity risks and recommended actions in a clear and effective manner.

• Associate degree with 4+ years of Information Security experience;
  or
• Bachelor's degree with 2+ years of Information Security experience;
  or
• 6+ years of relevant experience in a technical cybersecurity or information security role.

Relevant professional certifications are highly valued, including:

• GIAC: GCIH, GCED, GSEC or similar
• EC-Council: CEH, CPENT, CHFI, CND, ECIH and related certifications
• CompTIA: Security+, CASP+
• Microsoft: Azure Security Engineer Associate, Cloud and AI Security Engineer Associate, Azure AI Fundamentals

Equivalent experience and certifications will be considered.

The ideal candidate will bring demonstrated experience in several of the following areas:

• SIEM administration, alert management, detection tuning, and security monitoring
• Security incident response, including playbooks, tabletop exercises, third-party IR providers, containment, recovery, and root-cause analysis
• Analysis of logs from firewalls, routers, proxies, endpoint security products, operating systems, and other security technologies
• Vulnerability management and remediation using platforms such as Nessus, Qualys, or Rapid7
• Incident management, network monitoring, and information security policies and procedures
• Data management and Data Loss Prevention (DLP) technologies
• Data privacy requirements, including GDPR, CCPA, HIPAA, or comparable regulations
• Security frameworks and standards such as NIST Cybersecurity Framework, ISO 27001, CIS, COBIT, and PCI
• Security architecture, network security, and intrusion detection/prevention
• Computer forensics, digital evidence handling, data recovery, and eDiscovery
• Windows and Linux operating systems and command-line tools
• TCP/IP, networking fundamentals, and common network protocols
• Microsoft 365 environments,…