Business Information Security Manager

Amey; United Kingdom; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading engineering solutions provider in the UK is looking for a Permanent Business Information Security Officer. This pivotal hybrid role requires a seasoned security leader to own security assurance, manage risk, and engage with clients across complex projects. Applicants should have proven experience in business-facing security roles along with certifications such as CISSP or equivalent. The position offers competitive remuneration, substantial benefits, and a flexible work environment aimed at fostering career growth.

Benefits

Competitive salary with yearly reviews

Career growth opportunities

Comprehensive training programs

At least 25 days of holiday plus bank holidays

Generous pension scheme

Flexible benefits options

Exclusive discounts from leading retailers

Social Impact Days for community service

Family-friendly policies

Membership in Affinity Networks

Qualifications

• Proven experience in business-facing security roles, including project assurance and client engagement.
• Strong technical grounding in security architecture, risk management, and secure solution design.
• Ability to translate complex technical concepts into clear, business-aligned recommendations.
• Familiarity with restricted environments and client contract requirements.

Responsibilities

• Translate business objectives into security requirements aligned with internal policies.
• Lead security assurance for business projects, including architecture reviews and risk assessments.
• Review high-level solution designs and advise on secure integration.
• Act as primary security contact for business units, promoting security awareness.
• Line-manage the Security, IT Engagement, and Third-Party Assurance team.

Skills

Business-facing security roles

Project assurance

Client engagement

Security architecture

Risk management

Secure solution design

Education

CISSP, CISM, SABSA or equivalent

Degree in information security, IT architecture, or business technology

Job description

We are excited to offer a fantastic opportunity for a Permanent Business Information Security Officer offering Hybrid working.

HOURS OF WORK

37.5 hours a week, Monday to Friday

Shape the future of security strategy in a business driving innovation and resilience.

We’re looking for a seasoned security leader to join our team and take ownership of security assurance, architecture oversight, and risk management across complex, high‑profile projects. This is a pivotal role for someone who thrives on influencing at senior level, engaging with business and technology, and embedding secure‑by‑design principles into business transformation.

What you will do:

• Strategy & Enablement: Translate business objectives into security requirements aligned with internal policies and client expectations. Provide strategic input into bids and proposals, ensuring client security requirements are met and risks addressed. Contribute to governance of emerging technologies and digital transformation initiatives.
• Risk, Resilience & Assurance: Lead security assurance for business projects, including architecture reviews, control validation, and risk assessments. Identify and elevate security risks related to business change, third parties, or technology use. Maintain awareness of threat trends and support client assurance activities.
• Architecture & Operations: Review high‑level solution designs and advise on secure integration, authentication, and data protection. Work closely with technology teams to embed security into delivery and operations. Support and help direct cyber incident response activities in coordination with business, IT and security teams.
• Engagement: Act as the primary security contact for business units, supporting secure delivery and risk awareness. Represent the security function in client meetings, working groups, and assurance forums. Promote security awareness and culture across business units.
• Leadership & Capability: Line‑manage the Security, IT Engagement, and Third‑Party Assurance team. Foster collaboration and support the development of technical security capabilities across the team and wider technology teams.

What you will bring:

• Proven experience in business‑facing security roles, including project assurance and client engagement.
• Strong technical grounding in security architecture, risk management, and secure solution design.
• Ability to translate complex technical concepts into clear, business‑aligned recommendations.
• Familiarity with restricted environments and client contract requirements.

Qualifications

CISSP, CISM, SABSA or equivalent. Degree or comparable experience in information security, IT architecture, or business technology.

We welcome applications from a diverse range of candidates.

Must undergo, hold, and maintain Security Check (SC) clearance due to the sensitivity of information handled.

Why join Amey?

At Amey, we work on long‑term stable contracts so you can plan a long‑term career with us. We have been awarded Platinum status by Investors in People which underscores our commitment to supporting our people across every part of our organisation, enabling them to shine. Whether you are starting your career, returning to the workplace or can bring your professional expertise and skills, there is a place for you here.

Our benefits

• Remuneration - Enjoy a competitive annual salary with the potential for yearly reviews to ensure you’re rewarded for your contributions.
• Career Growth: Shine in your career with advancement opportunities.
• Training Opportunities: Unlock your potential with comprehensive training, including fully funded leadership programmes tailored to your personal growth.
• Holidays - Enjoy at least 25 days of holiday plus bank holidays, and the opportunity to buy further days.
• Pension - Generous pension scheme, with extra contributions from Amey.
• Flexible benefits - Customise your benefits with options such as insurance benefits, Cycle2Work scheme and access to discounted gym membership.
• Exclusive Discounts - Access our online portal filled with discounts from leading retailers, healthcare services, and more, helping you save on the things that matter.
• Give Back to community - Two Social Impact Days each year, for volunteering and fundraising opportunities.
• Family friendly policies for new parents or if you provide care for a dependant.
• Membership of our Affinity Networks who connect, support and inspire diverse communities within Amey.

About Amey

We are a leading provider of full life‑cycle engineering, operations, and decarbonisation solutions, for transport infrastructure and complex facilities.

Our purpose is to deliver sustainable infrastructure solutions that enhance life and protect our shared future.

Every day our teams across the UK and internationally do truly important work shaping some of the most complex environments that impact generations to come.

Application Guidance and Diversity & Inclusion

At Amey we constantly evolve how we work to reflect the different needs and backgrounds of our employees. We welcome applications from all suitably qualified candidates, regardless of their race, gender, disability, religion/belief, sexual orientation, or age. We believe everyone deserves an opportunity to shine.

As a disability confident leader, we’re proud to guarantee applicants with a disability an interview if they meet the minimum requirements for the role.

Please contact our recruitment team at [e-mail] to discuss any access needs, reasonable adjustments or additional support that you may require at any point during the recruitment process.

Apply today

***We may close this vacancy early if we receive sufficient applications. Please apply as soon as possible***

Inspiring Impact Together

#LI-JH1