IT Security Design Manager

The IT Security Design Manager will work within a team of security designers to embed security requirements into IT and business projects from the outset. This role combines strong technical and advisory expertise in solution design and architecture, ensuring security by design principles are consistently applied across all initiatives.

• Security by Design: Act as a key point of contact for project teams, ensuring new initiatives undergo appropriate security assessment and receive pragmatic, risk-based design advice.
• Risk Assessment: Conduct and oversee security risk assessments for projects, defining control requirements and ensuring compliance with organisational standards.
• Technical Leadership: Provide technical expertise in solution design and architecture, embedding security principles into technical decisions.
• Collaboration: Work closely with IT, business, and architecture teams to integrate security by design into solutions.
• Framework Contribution: Support the refinement of the IT Security Framework to deliver consistent and effective security practices.
• Escalation
  :
  Identify, influence, and elevate significant security risks or issues to senior security leadership for timely resolution, ensuring that critical threats are addressed effectively and do not hinder project objectives.

• Industry-recognised qualifications such as CISSP, CISM, or equivalent.
• Strong technical expertise in solution design and architecture with significant and proven experience in secure systems design.
• Experience conducting security risk assessments and providing design guidance.
• Broad understanding of information security processes and technologies across networks, applications, cloud, mobile, and web platforms.
• Familiarity with agile methodologies and modern development practices.
• Knowledge of securing emerging technologies such as AI, Machine Learning, and cloud-native platforms.
• Excellent communication skills; able to explain technical concepts clearly to non-technical stakeholders.
• Strong analytical, organisational, and problem-solving capabilities.
• Commercial experience in IT Security roles (consultant or management level).

• A demonstrated ability to research and acquire new knowledge and skills quickly

• Experience with frameworks and standards such as CIS Controls, ISO 27001, NIST CSF, PCI DSS, and GDPR.
• Hands-on experience with enterprise security architecture and solution design.
• Skilled in presenting complex information to stakeholder groups and large cross-functional teams, ensuring clarity and engagement across diverse audiences.
• Previous management experience.