Information Security Manager

Title: Information Security Manager

Location: Wigan, UK

Work mode: Hybrid (4 days)

Are you passionate about safeguarding information and ensuring compliance in a dynamic environment? Do you have experience in information security governance, risk, and compliance, and thrive on working with diverse stakeholders? If so, we would love to hear from you!

As Information Assurance / Security Manager
, you will play a key role in delivering information security and data protection services to Agilisys and our customers. This is an exciting opportunity for an ambitious security professional to work in a fast‑paced environment, supporting compliance with industry standards and frameworks.

You will be part of a team responsible for:

• Assessing, approving, and advising on all information assurance and security matters for Agilisys and our clients.
• Implementing and maintaining information security management processes aligned to ISO 27001, supporting audits and continuous improvement.
• Managing compliance with multiple security standards and frameworks applicable to the UK public sector, including Cyber Essentials Plus, NHS DSPT, PCI DSS, NCSC CAF, PSN CoCo.
• Performing risk management activities and supporting security incident response.
• Collaborating with project and programme teams to identify solutions to security challenges.
• Overseeing vulnerability management efforts and ensuring security service delivery remains compliant.

The ideal candidate will have a strong understanding of information security governance, risk, and compliance, with proven experience in security management and stakeholder engagement.

• Knowledge and experience of information security management and risk management.
• Understanding of technical security controls in an IT environment.
• Awareness of data protection principles and compliance.
• Incident response experience for security incidents and events.
• Strong written and oral communication skills.
• Familiarity with frameworks and technology stacks such as Azure, Microsoft Security solutions, SASE platforms.
• Relevant certifications (e.g., CISM, CISSP, CCSP, CRISC, CISA).
• Knowledge of GDPR / DPA 2018 and DPIAs.
• Experience using AI responsibly within an information security context.
• Experience with in the UK public sector (central/local government, healthcare, blue light services) is a strong plus.