Information Security Manager

Construction Sector

About the Role

An exciting opportunity has arisen for an experienced Information Security Manager to join a growing and forward-thinking organisation. Reporting to senior leadership, you will be responsible for developing, implementing, and maintaining the company's information security strategy, ensuring the protection of business-critical data, systems, and infrastructure.

This position offers the opportunity to shape and enhance the organisation's security posture while working closely with both technical and non-technical stakeholders across the business.

Key Responsibilities

* Develop, implement, and maintain information security policies, procedures, and controls.

* Lead and manage the organisation's information security and cyber security strategy.

* Ensure compliance with ISO 27001, Cyber Essentials, UK GDPR, and other applicable standards and regulations.

* Conduct security risk assessments and implement appropriate mitigation measures.

* Manage security incidents, investigations, and response activities.

* Monitor emerging threats and vulnerabilities, providing recommendations to strengthen security controls.

* Support internal and external security audits and compliance programmes.

* Deliver security awareness training and promote a strong security culture throughout the business.

* Collaborate with IT teams and third-party providers to ensure secure systems and services.

* Produce regular reports and updates for senior management on security risks and performance.

Requirements

* Proven experience working in an Information Security or Cyber Security Management role.

* Strong understanding of information security frameworks, policies, and industry best practices.

* Experience with ISO 27001 and supporting or managing security compliance programmes.

* Knowledge of risk management, security assessments, vulnerability management, and incident response.

* Experience developing and maintaining security policies, procedures, and controls.

* Strong understanding of data protection legislation and UK GDPR requirements.

* Ability to work confidently with both technical and non-technical stakeholders across the organisation.

* Excellent communication, influencing, and problem-solving skills.

* High levels of integrity, professionalism, and attention to detail.

* Relevant professional qualifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor would be highly advantageous.

What's on Offer?

✅ Competitive salary and benefits package

✅ Hybrid and flexible working arrangements

✅ Career progression opportunities within a growing organisation

✅ Ongoing professional development and certification support

✅ Collaborative and supportive working environment

✅ Opportunity to play a key role in shaping the company's cyber security strategy