Job Search

We are seeking an experienced Information Security Manager to lead the development, implementation and continual improvement of effective information security practices across the organisation. This is an influential role, working with stakeholders at all levels to protect information assets, reduce risk and support secure business operations.

You will be responsible for maintaining the information security framework, policies and standards, ensuring they remain aligned with relevant legislation, regulatory requirements and recognised industry practices. You will lead security risk assessments, oversee the treatment of identified risks and provide clear reporting, recommendations and assurance to senior management.

Key responsibilities will include managing incident response processes, coordinating investigations and ensuring that lessons learned are translated into practical improvements. You will also oversee vulnerability management, security monitoring, access control reviews, supplier and third-party assurance, and the delivery of security awareness and training programmes.

The role will involve working closely with technology, data protection, compliance, procurement and operational teams to embed security by design into projects, systems and processes. You will contribute to business continuity and disaster recovery planning, support audit activity, and help maintain the organisation’s readiness to respond to emerging threats.

Applicants should have substantial experience in information or cyber security, including risk management, governance, incident management and security assurance. A strong understanding of frameworks such as ISO 27001, the NIST Cybersecurity Framework or Cyber Essentials is desirable, as is experience working with data protection requirements and third-party risk.

You will need excellent communication and influencing skills, together with the ability to explain complex security matters clearly to both technical and non-technical audiences. Professional qualifications such as CISSP, CISM, CRISC or an equivalent are advantageous. A proactive, analytical and collaborative approach is essential, as is the ability to manage competing priorities and deliver practical, proportionate security improvements.

We are seeking an experienced Information Security Manager to lead the development, implementation and continual improvement of an organisation-wide information security programme. This is an excellent opportunity for a security professional who can combine strategic thinking with practical delivery, helping to protect information, systems and services against evolving threats.

You will be responsible for maintaining the information security framework, policies and standards, ensuring they remain aligned with business objectives, legal requirements and recognised industry good practice. You will conduct risk assessments, oversee risk treatment plans and provide clear, proportionate advice to senior stakeholders on security risks and controls.

The role will include managing security incidents, coordinating investigations and ensuring that lessons learned are translated into meaningful improvements. You will also support vulnerability management, security testing, access control reviews, supplier assurance and business continuity planning. Working closely with technology, compliance, audit and operational teams, you will help embed secure practices across the organisation and promote a strong culture of security awareness.

You will lead or contribute to governance activities, including management reporting, control assessments, audit preparation and regulatory submissions. The postholder will also help define security metrics and monitor performance against agreed objectives, identifying areas for improvement and tracking remediation activity through to completion.

We are looking for a confident communicator with experience in information security, cyber security, risk management or a related discipline. You should have a strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS, together with practical experience of incident response, security governance, risk assessment and third-party assurance. Relevant professional qualifications, such as CISSP, CISM, CRISC or equivalent experience, would be advantageous.

You will be organised, analytical and comfortable influencing colleagues at all levels. The ability to explain technical and security matters clearly to non-specialist audiences is essential, as is a pragmatic approach to balancing risk, compliance and operational needs. This role offers the opportunity to make a tangible contribution to resilience, trust and the secure delivery of critical services.

We are seeking an experienced Information & Cyber Security Manager to lead the development, implementation and continual improvement of a robust security framework. This is a key role responsible for protecting information assets, supporting regulatory compliance and strengthening organisational resilience against evolving cyber threats.

You will develop and maintain information security policies, standards and procedures, ensuring they reflect current legislation, recognised best practice and business requirements. Working closely with technology, risk, legal and operational teams, you will identify vulnerabilities, assess risks and agree proportionate controls. You will also oversee security assurance activities, including risk assessments, audits, penetration testing, supplier reviews and remediation planning.

The role will involve monitoring the threat landscape, coordinating responses to security incidents and ensuring that lessons learned are embedded into future practices. You will contribute to business continuity and disaster recovery planning, support the secure delivery of projects and provide clear, constructive advice to senior stakeholders. A further important aspect of the position will be promoting a strong security culture through awareness campaigns, training and effective communication.

To succeed, you will have substantial experience in information security, cyber security, risk management or a closely related discipline, together with a strong understanding of security governance and control frameworks. Experience of working with standards such as ISO 27001, the NIST Cybersecurity Framework or CIS Controls would be valuable, as would knowledge of UK data protection and relevant regulatory requirements. You should be confident managing incidents, suppliers and competing priorities in a complex environment.

We are looking for a collaborative and pragmatic professional who can translate technical risks into clear business impacts. You will need excellent analytical, communication and influencing skills, sound judgement and the ability to work effectively with colleagues at all levels. Relevant qualifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer or Auditor are desirable, although equivalent practical experience will be considered.

We are seeking an experienced Information Security Manager to lead the development, implementation and continuous improvement of information security practices across the organisation. This is an opportunity to shape a resilient security environment, support business objectives and ensure that information and technology assets are protected against evolving threats.

You will be responsible for maintaining the information security framework, policies and procedures, ensuring they remain aligned with relevant legislation, recognised standards and industry best practice. Working closely with technology, risk, compliance and operational teams, you will identify security risks, oversee mitigation plans and provide clear, practical advice to stakeholders at all levels.

Key responsibilities will include managing information security risk assessments, supporting internal and external audits, monitoring compliance, and coordinating responses to security incidents. You will also oversee vulnerability management, security awareness initiatives, access control reviews and third-party security assessments. The role will involve preparing management reports, tracking key security metrics and presenting recommendations to senior leaders.

The successful candidate will have demonstrable experience in information security, cyber risk or a closely related discipline, with a strong understanding of security governance, risk management and incident response. Experience of working with frameworks such as ISO 27001, the NIST Cybersecurity Framework or equivalent would be advantageous. Relevant professional qualifications, such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer, are desirable.

You will be an effective communicator who can translate technical risks into clear business language and build productive relationships across a varied stakeholder group. Strong analytical, organisational and problem-solving skills are essential, together with the confidence to influence decision-making and manage competing priorities. A proactive, collaborative approach and a commitment to continuous improvement are also important.

This role offers the opportunity to make a significant contribution to security maturity while working in a supportive and evolving environment. Applications are welcomed from candidates who can demonstrate sound judgement, professional integrity and a practical, risk-based approach to information security.

We are seeking an experienced Information Security Manager to lead the development, implementation and continuous improvement of information security practices across the organisation. This is a key role responsible for protecting information assets, managing cyber risk and ensuring that security remains aligned with business objectives, regulatory obligations and recognised industry standards.

You will develop and maintain information security policies, standards and procedures, ensuring they are communicated effectively and embedded across all areas of the business. You will oversee risk assessments, security reviews and control testing, identify areas for improvement, and provide clear recommendations to senior stakeholders. The role will also involve maintaining the information security risk register and reporting on key risks, incidents, performance indicators and remediation activity.

Working collaboratively with technology, compliance, legal, operational and third-party teams, you will coordinate responses to security incidents and support the investigation of suspected breaches. You will help maintain and test incident response, business continuity and disaster recovery arrangements, ensuring lessons learned are translated into practical improvements. You will also contribute to supplier assurance, access management, vulnerability management, security awareness and data protection initiatives.

The successful candidate will have proven experience in information security, cyber security, risk management or a closely related discipline, ideally within a complex or regulated environment. You will have a strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS, together with knowledge of relevant data protection and regulatory requirements. Professional qualifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer would be advantageous.

You will be an excellent communicator, able to explain technical risks clearly to both technical and non-technical audiences. Strong analytical, organisational and stakeholder management skills are essential, as is the ability to work independently, prioritise competing demands and influence positive security behaviours. This role offers the opportunity to make a meaningful contribution to organisational resilience and the protection of critical information.

We are seeking an Information Security Assurance Manager to lead the delivery of robust security assurance activities across a complex organisation. This is an influential role for an experienced information security professional who can provide clear advice, challenge constructively and help embed effective security practices across technology, projects and business operations.

You will develop and maintain the information security assurance framework, ensuring that policies, standards and controls remain aligned with recognised industry practices, regulatory obligations and organisational risk appetite. You will plan and deliver assurance reviews, control assessments and audits, identifying weaknesses and agreeing practical remediation plans with relevant stakeholders.

Key responsibilities will include managing the security risk and assurance portfolio, monitoring the progress of corrective actions, and producing accurate reports for senior management and governance forums. You will support compliance activities, contribute to internal and external audits, and provide assurance over third-party suppliers, cloud services and significant technology or business change initiatives.

You will work closely with cyber security, technology, risk, compliance, procurement and operational teams to promote a consistent approach to security assurance. The role will also involve developing meaningful metrics, improving assurance processes, maintaining supporting documentation and providing guidance on control design, evidence requirements and risk treatment.

Applicants should have substantial experience in information security assurance, governance, risk or audit, with a strong understanding of security frameworks such as ISO 27001, NIST or CIS Controls. Experience of assessing technical and organisational controls, managing audit activity and working with third-party risk is essential. Relevant professional qualifications, such as CISM, CISSP, CRISC, CISA or an equivalent, would be advantageous.

You will be an excellent communicator with strong analytical and organisational skills, able to translate complex security matters into clear business advice. A pragmatic, collaborative approach, sound judgement and the confidence to influence stakeholders at all levels are essential. This is an opportunity to make a meaningful contribution to security maturity while supporting responsible delivery and continuous improvement.

We are seeking an experienced Information Security and AI GRC Manager to lead the development and continuous improvement of governance, risk and compliance frameworks across information security and artificial intelligence. This is an influential role for a collaborative professional who can translate regulatory expectations, emerging risks and business objectives into practical controls and clear guidance.

You will develop and maintain policies, standards and procedures covering information security, data protection, artificial intelligence governance, third-party risk and operational resilience. Working with technology, legal, privacy, risk and business teams, you will ensure that security and AI-related risks are identified, assessed, recorded and managed effectively.

Key responsibilities will include overseeing risk assessments, control testing, audit preparation and remediation activity; maintaining risk registers and management reporting; and supporting compliance with relevant legislation, standards and regulatory requirements. You will also establish governance processes for the responsible adoption and use of AI, including model and use-case assessments, supplier due diligence, documentation, monitoring and review.

The role will involve advising senior stakeholders, facilitating governance forums and promoting a strong culture of security, privacy and responsible innovation. You will monitor changes in the threat, regulatory and AI landscape, assess their potential impact and recommend proportionate improvements. You may also support incident response, business continuity exercises and the development of training and awareness programmes.

Applicants should have substantial experience in information security governance, risk and compliance, with demonstrable knowledge of recognised frameworks such as ISO 27001, NIST or equivalent. Experience of AI governance, technology risk, data protection or responsible AI principles is highly desirable. Professional qualifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Auditor, or relevant AI governance certification would be advantageous.

You will be an effective communicator with strong analytical, organisational and stakeholder-management skills. The successful candidate will be comfortable working with ambiguity, challenging constructively and presenting complex risks in a clear, concise manner. Experience operating in a regulated or fast-changing environment, alongside a pragmatic and solutions-focused approach, will be important.

An experienced IT Manager is required to lead the infrastructure and information security function within a complex and fast-paced environment. This is a hands-on leadership role, responsible for ensuring the availability, resilience and security of core technology services while supporting the organisation’s wider operational and strategic objectives.

You will manage the design, implementation and ongoing improvement of IT infrastructure, including networks, servers, cloud services, end-user computing, backups and disaster recovery arrangements. You will oversee infrastructure projects, supplier relationships, technical standards and service performance, ensuring systems are reliable, scalable and aligned with business requirements. The role will also involve managing budgets, prioritising work and providing clear reporting to senior stakeholders.

Information security will be a key area of responsibility. You will maintain and develop security policies, controls and procedures, identify and mitigate risks, and support compliance with relevant legislation and industry standards. You will coordinate vulnerability management, access controls, security monitoring, incident response, business continuity and disaster recovery testing. You will also promote security awareness and ensure that technical and operational teams understand their responsibilities.

Applicants should have substantial experience managing IT infrastructure and information security, ideally within a multi-site or similarly complex environment. You will have strong knowledge of cloud technologies, networking, Microsoft platforms, cyber-security principles, risk management and service delivery practices. Experience of leading technical teams, managing third-party providers and delivering infrastructure or security transformation projects is essential.

Excellent communication, leadership and problem-solving skills are required, together with the ability to translate technical issues into clear business recommendations. Relevant professional qualifications in IT, infrastructure, cyber security or service management would be advantageous. This role offers the opportunity to shape technology strategy, strengthen organisational resilience and lead the continuous improvement of essential IT services.

We are seeking an experienced Senior Manager, Business Information Security to lead the development and delivery of a robust information security programme across a complex business environment. This is a strategic leadership role, responsible for ensuring that security risks are identified, assessed and managed effectively while enabling the organisation to meet its operational and commercial objectives. You will work closely with senior stakeholders, technology teams, risk and compliance functions, and business leaders to promote secure-by-design ways of working.

Your responsibilities will include developing and maintaining information security policies, standards and procedures; overseeing business security risk assessments; and advising on appropriate controls, risk treatments and assurance activities. You will lead the monitoring and reporting of security risks, vulnerabilities, incidents and control effectiveness, providing clear insight and recommendations to senior management. The role will also support security incident response, business continuity and crisis management, ensuring that lessons learned are embedded across the organisation. You will help manage regulatory, audit and customer assurance requirements, while contributing to security awareness and training initiatives.

The successful candidate will have substantial experience in information security, cyber risk, governance, risk and compliance, or a closely related discipline, including experience leading teams or large-scale security programmes. You will have a strong understanding of recognised security frameworks and standards, such as ISO 27001, NIST or CIS, together with practical knowledge of risk management, control assurance, third-party security and incident management. Excellent communication and stakeholder management skills are essential, as is the ability to translate complex technical and regulatory matters into clear, commercially relevant advice. Professional security qualifications, such as CISSP, CISM or CRISC, would be advantageous. You will be a confident, collaborative leader who can influence at all levels and deliver meaningful improvements in a changing environment.

We are seeking an experienced Information Security Manager to lead the development, implementation and continuous improvement of an organisation-wide information security programme. This role will provide strategic direction and practical guidance to protect information assets, technology platforms and business operations from evolving cyber threats. You will work closely with senior stakeholders, technology teams and business leaders to promote a strong security culture and ensure that security considerations are embedded into decision-making, projects and operational processes.

Key responsibilities will include maintaining information security policies, standards and procedures; managing security risk assessments, control frameworks and treatment plans; and overseeing compliance with relevant legislation, regulatory requirements and recognised industry standards. You will coordinate vulnerability management, incident response, security monitoring and investigations, ensuring that issues are prioritised, contained and resolved effectively. The role will also support business continuity and disaster recovery planning, supplier and third-party risk reviews, access governance, data protection activities and regular security testing. You will prepare clear reports and metrics for leadership, track remediation activity and provide assurance on the effectiveness of security controls.

The successful candidate will have substantial experience in information security, cyber risk or a related discipline, preferably gained in a complex or highly regulated environment. You should have strong knowledge of security frameworks and practices such as ISO 27001, NIST, CIS Controls or equivalent, together with experience managing audits, incidents, risk registers and improvement programmes. Relevant professional qualifications, such as CISSP, CISM, CRISC or equivalent, are desirable. Excellent communication and influencing skills are essential, as is the ability to translate technical risks into clear business impacts and practical actions. You will be organised, analytical and confident working independently while building effective relationships across all levels of the organisation.