Information Security Manager

Job description

The Opportunity

Our market leading client are looking for an Information Security Manager to take a leading role in shaping its security strategy and developing its information security function.

This is an opportunity for an experienced security professional who combines strong technical foundations with the ability to think strategically, influence stakeholders and drive meaningful improvements across the business.

The successful candidate will have the opportunity to influence security priorities, shape the future structure of the team and establish a pragmatic approach to managing information security risks.

We're particularly interested in individuals who have built their careers within IT infrastructure, networking or core technology environments before progressing into information security leadership.

The Role

Reporting to senior leadership, you will take responsibility for developing and delivering the organisation's information security strategy, ensuring that security initiatives align with operational requirements and wider business objectives.

Responsibilities

• Developing and delivering an information security strategy and roadmap aligned with business priorities.
• Helping shape the future security function, identifying resource requirements and influencing future recruitment.
• Leading information security governance, risk management and compliance initiatives, including Cyber Essentials and ISO 27001.
• Providing technical oversight and guidance across infrastructure, cloud, networking and security platforms.
• Managing security risks, vulnerabilities and incident response processes, working closely with internal teams and external security partners.
• Overseeing third-party security providers, including managed security operations services.
• Influencing senior stakeholders and promoting a proactive, security-conscious culture.
• Challenging existing practices, identifying opportunities for improvement and driving security initiatives across the organisation.
• Balancing security requirements with business priorities, operational demands and commercial considerations.
• Providing practical technical support and guidance when required, while maintaining a primary focus on security leadership and strategy.

Experience Required

• A strong background in IT infrastructure, networking or systems engineering, with subsequent progression into information security.
• Experience developing and implementing information security strategies, policies and improvement programmes.
• A solid understanding of networking, Windows Server, Active Directory, Microsoft 365, Azure and hybrid infrastructure environments.
• Experience with security governance, risk management and recognised frameworks such as ISO 27001, Cyber Essentials and NIST.
• Knowledge of security operations, vulnerability management, incident response and endpoint protection.
• Experience working with security technologies such as EDR, SIEM, firewalls and email security platforms.
• Strong stakeholder management skills, with the confidence to challenge technical and commercial decisions.
• The ability to assess security risks pragmatically and translate technical issues into business-focused recommendations.
• A proactive mindset, sound judgement and the ability to drive change rather than simply maintain established processes.

Experience with technologies such as SentinelOne, Mimecast, Fortinet, ManageEngine and Microsoft security solutions would be advantageous, although experience with comparable platforms is equally relevant.

At Gleeson Recruitment Group, we embrace inclusivity and welcome applicants of all backgrounds, experiences, and abilities. We are proud to be a disability confident employer.

By applying you will be registered as a candidate with Gleeson Recruitment Limited. Our Privacy Policy is available on our website and explains how we will use your data.

Reference 225783815