Security Manager

Envitia is a UK-based software and services company that helps organisations unlock the full value of their data to make better, faster decisions. With over 30 years of experience, we specialise in delivering innovative software products, solutions, and consultancy services that transform complex data challenges into actionable insights.

Our mission is to empower customers across defence, government, and national security sectors to harness the power of data — from geospatial intelligence to advanced analytics and AI integration. We are proud to be a trusted partner to UK defence and government organisations, delivering technology that drives smarter, data-driven outcomes.

We’re also delighted to have been named one of The Sunday Times Top 100 Medium-Sized Companies to Work For 2025 — a recognition of our commitment to innovation, collaboration, and creating an outstanding workplace where people can thrive.

Envitia is looking for a Security Manager to lead our Information Security (Info Sec) strategy and oversee wider company security across the organisation. This role is central to ensuring we meet and maintain high-assurance defence and industry security standards while continuing to deliver trusted, mission-critical solutions for our clients.

It’s an exciting time for Envitia where we have tripled in size in the last 3 years and continued to win new clients. The role will continue to lead shaping Envitia’s security posture, managing key standards and certifications, leading incident response, and fostering a strong security-aware culture across the business. You will also play a key role in supporting defence engagements, audits, and pre-sales activities, helping position Envitia as a trusted, security-first partner.

• Standards Management
  :
  Lead the implementation and maintenance of key frameworks (e.g., ISO 27001, Cyber Essentials Plus, and defence-specific standards like DCC, NIST or JSP 440).
• Security Strategy
  :
  Develop and enforce internal security policies that protect both our company data and our clients' intellectual property.
• Risk Assessment
  :
  Conduct regular gap analyses and risk assessments to identify vulnerabilities in our digital workflows and supply chain.
• Defence Liaison
  :
  Act as the primary point of contact for defence-related security audits and government vetting processes.
• Incident Response
  :
  Manage the "Security Incident Response Plan," ensuring the team knows exactly how to react to potential breaches or data leaks and lead any incident response activities.
• Culture & Training
  :
  Run security awareness sessions for our teams to ensure "Security by Design" is part of every project we deliver.
• Tooling & Monitoring
  :
  Oversee the selection and management of security tools (EDR, SIEM, Encryption) used across our remote or hybrid workforce.
• Collaboration: Support and collaborate with the Quality Manager and Head of Operations in maintaining ISO standards and other required certifications.
• Sales Support: Support the business in pre-sales activities, specifically relating to the security aspects of a tender / project.

• Leading or owning an Information Security Management within a consultancy or defence-adjacent firm.
• Implementing, maintaining, and evidencing compliance against recognised security frameworks such as ISO 27001 and Cyber Essentials Plus, with exposure to defence-specific standards (e.g. DCC, NIST, JSP 440).
• Acting as a primary point of contact for external audits, security assessments, and government or customer assurance activities.
• Conducting risk assessments, gap analyses, and security reviews across systems, processes, and supply chains.
• Working closely with software engineers, cloud architects, and technical teams to embed security controls into real-world delivery.
• Developing and enforcing security policies, procedures, and incident response plans.
• Supporting or leading security incident response, including investigation, containment, and reporting.

The successful candidate must be eligible for a DV (Developed Vetting) security clearance.

The role will require travel to our Horsham offices 2 days a…