Cyber Security Manager

Investigo; Birmingham; Hybrid; GBP 63,000 - 77,000; Full time

Benefits offered by this job

Flexible benefits allowance

Pension contribution up to 12.25%

Job summary

Investigo is seeking an Information Security Manager to become the most influential security voice in the business. This role sits at the crossroads of technology, risk and leadership, reporting directly into the IT Director and guiding security strategy across the organisation.

You will challenge risk, advise on supplier security and drive governance, vulnerability management and incident response with a hybrid working pattern in Birmingham.

Qualifications

• Strong experience across IT security and risk management
• Solid understanding of cyber security frameworks, governance and compliance
• Experience working within Microsoft and cloud environments
• Knowledge of technologies such as SIEM, DLP, IDS/IPS and endpoint protection
• Experience handling security incidents, vulnerabilities and threat mitigation
• The confidence to influence stakeholders from technical teams through to executive leadership
• CISSP, CISM or similar qualifications, or you're working towards them

Responsibilities

• Leading the Information Security function
• Owning the cyber security roadmap and security strategy
• Acting as the organisation's senior security SME
• Driving security governance, assurance and risk management activities
• Managing security technologies including SIEM, DLP, IDS/IPS and endpoint security platforms
• Leading vulnerability management, penetration testing and remediation programmes
• Responding to and overseeing security incidents when they happen
• Influencing technology decisions and providing security input into projects and architecture reviews
• Managing third-party and supplier security risk
• Working closely with senior leadership to improve the organisation's overall security maturity

Job description

In and around £70,000 + Strong Benefits Package

Most security jobs want someone to own the risk register.

This one wants someone to own the conversation.

I'm working with an organisation looking for an Information Security Manager to become the most influential security voice in the business.

Not the person sitting in the corner writing policies.

The person people turn to when a decision matters. The person challenging risk.

Questioning suppliers. Guiding investment. Shaping strategy. And making sure security isn't something the organisation thinks about after the fact.

Reporting directly into the Director of IT, you'll lead the Security & Risk team while taking ownership of cyber security across the entire organisation.

It's a role that sits at the crossroads of technology, risk, governance and leadership.

You'll need enough technical depth to challenge engineers. Enough commercial awareness to influence senior stakeholders. And enough credibility to make security everyone's responsibility.

What you'll be doing

• Leading the Information Security function
• Owning the cyber security roadmap and security strategy
• Acting as the organisation's senior security SME
• Driving security governance, assurance and risk management activities
• Managing security technologies including SIEM, DLP, IDS/IPS and endpoint security platforms
• Leading vulnerability management, penetration testing and remediation programmes
• Responding to and overseeing security incidents when they happen
• Influencing technology decisions and providing security input into projects and architecture reviews
• Managing third-party and supplier security risk
• Working closely with senior leadership to improve the organisation's overall security maturity

What I'm looking for

• You've probably already been the person everyone relies on for security decisions.
• Maybe you're a Security Manager.
• Maybe you're a Security Lead.
• Maybe you're already doing this job but without the title.

Either way, you'll bring:

• Strong experience across IT Security and Risk Management
• A solid understanding of cyber security frameworks, governance and compliance
• Experience working within Microsoft and cloud environments
• Knowledge of technologies such as SIEM, DLP, IDS/IPS and endpoint protection
• Experience handling security incidents, vulnerabilities and threat mitigation
• The confidence to influence stakeholders from technical teams through to executive leadership
• CISSP, CISM or similar qualifications, or you're working towards them

Why this one?

• Because security already has a voice here.
• They want someone who can make it louder.
• You'll have visibility with senior leaders.
• You'll have ownership of the security agenda.
• You'll have the opportunity to influence real business decisions.
• And you'll have the backing to drive meaningful change instead of simply maintaining the status quo.

Salary: Around £70,000 (potentially some flex on this)

Location: Birmingham with hybrid working

Benefits: Including a flexible benefits allowance and a pension contribution of up to 12.25%