IT Security & Risk Manager
Listed on 2026-10-26
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Project Manager, IT Consultant
Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits
Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation's security strategy?
We're seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.
Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.
Why Join?- Lead and shape the organisation's cyber security strategy
- Influence senior leadership and board-level stakeholders
- Own and deliver a technical security roadmap
- Manage and develop a dedicated security and risk team
- Hybrid working with just 2 days per week onsite
- Opportunity to make a lasting impact across a complex technology environment
- Lead the IT Risk and Security function and manage a small team
- Develop and deliver the technical security roadmap
- Oversee IT security policies, controls, and governance frameworks
- Manage IT risk assessments, threat modelling, and mitigation activities
- Own the IT risk register and ensure risks are effectively monitored and managed
- Lead responses to significant cyber security incidents
- Oversee vulnerability management and remediation programmes
- Act as the organisation's security subject matter expert, advising senior stakeholders and leadership teams
- Proven experience in a senior IT Security, Cyber Security, or Information Security position
- Strong knowledge of risk management and threat analysis methodologies
- Experience implementing and maintaining security frameworks including ISO 27001
- Knowledge of Cyber Essentials and wider security best practices
- Experience developing security policies, controls, and procedures
- Ability to communicate and influence stakeholders at all levels
- CISSP, CISM, or similar security certification (or working towards) preferred
- Experience with in a regulated environment
- Cyber resilience and security operations expertise
- Experience managing security professionals
- Strong commercial awareness and stakeholder management skills
Salary: Up to £74,000
We welcome applicants from all backgrounds. Our Client are an equal opportunities employer.
Right to work in the UK is required for this role.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).