Information Security Manager

The Opportunity

Our client a nationwide market leading organisation is undergoing significant technology transformation, who are looking to appoint an Information Security Manager to strengthen their security governance, processes and overall cyber security maturity.

This is an excellent opportunity for an experienced information security professional to take ownership of security governance, influence strategic decisions and lead a small team within a business investing in its technology infrastructure and security capabilities.

With a major cloud migration underway and ambitions to further develop its security framework, the organisation is looking for someone who can bring structure, accountability and a proactive approach to information security.

The Role

You will lead a small information security function, with a primary focus on governance, risk management and continuous improvement, alongside oversight of operational security activities.

Responsibilities

• Developing, implementing and improving information security policies, processes and governance frameworks.
• Supporting the organisation's Cyber Essentials accreditation objectives and longer-term progression towards ISO 27001.
• Identifying, assessing and managing information security risks, ensuring appropriate controls and remediation plans are in place.
• Managing and developing a small team of security professionals, promoting accountability and continuous improvement.
• Providing oversight of security operations, working closely with an external managed Security Operations Centre (SOC).
• Collaborating with infrastructure and IT teams to ensure security considerations are embedded into technology projects, including cloud migration initiatives.
• Reviewing security incidents, vulnerabilities and emerging threats, ensuring appropriate action is taken.
• Engaging with stakeholders across the business to promote security awareness and ensure security decisions support operational requirements.

Experience

We are looking for someone who combines strong information security governance experience with a practical understanding of technical security environments.

• Previous experience in information security, cybersecurity governance or security management.
• Strong knowledge of security governance, risk management and recognised security frameworks.
• Experience working with ISO 27001, Cyber Essentials or similar security standards.
• An understanding of security operations, endpoint protection, vulnerability management and incident response.
• The ability to work effectively with infrastructure teams and external security providers.
• Strong stakeholder engagement skills, with the confidence to challenge, influence and communicate security risks.
• A proactive, solutions-focused approach, with the ability to turn security requirements into practical improvements.
• Experience leading or mentoring security professionals, or the potential to step into a formal management role.
• Experience in Microsoft Azure environments, cloud security or working alongside a managed SOC would be advantageous.

Why Consider This Opportunity?

• Genuine ownership: Help shape the organisation's approach to information security governance and risk management.
• Technology transformation: Work within a business modernising its infrastructure and investing in cloud technologies.
• Leadership opportunity: Manage and develop a small security team while influencing wider IT decisions.
• Long-term progression: Play a key role in improving security maturity and supporting future accreditation objectives.
• Hybrid flexibility: A mix of office-based collaboration and remote working.

If you have the skills we are looking for and interested in hearing more, send your CV

At Gleeson Recruitment Group, we embrace inclusivity and welcome applicants of all backgrounds, experiences, and abilities. We are proud to be a disability confident employer.

By applying you will be registered as a candidate with Gleeson Recruitment Limited. Our Privacy Policy is available on our website and explains how we will use your data.