Cyber Security Manager

InfoSec People Ltd; Guildford; On-site; GBP 70,000 - 110,000; Full time

Job summary

InfoSec People Ltd is seeking a Cyber Assurance Security Manager to safeguard critical systems and services within a UK space sector environment. You will embed security across the project lifecycle, oversee certifications and assurance activities, and guide technical, operational and business functions in security matters.

You'll own governance, risk, assurance and technical oversight, collaborating with engineering, infrastructure, delivery and leadership teams to influence security posture on

Qualifications

• Experience in Defence, Aerospace, Government or highly regulated environments.
• Experience implementing or assuring ISO 27001 ISMS.
• Ability to communicate complex security risks to stakeholders.

Responsibilities

• Lead information and cyber security assurance across multiple projects.
• Own and maintain security certifications including ISO 27001.
• Produce security artefacts: risk assessments, management plans, reports.
• Support Secure by Design across infrastructure, cloud and apps.
• Coordinate vulnerability assessments and penetration testing.
• Review designs to ensure security requirements are met.
• Support incident response and resilience planning.
• Engage with suppliers to maintain contractual security obligations.

Skills

Security Assurance

GRC

Stakeholder comms

Security governance

Incident response

Education

CISM

CISA

CISSP

CMIRM

Tools

ISO 27001

NIST SP 800-53

CE+

Job description

I'm working with an innovative organisation at the forefront of the UK space sector that's looking to appoint an Cyber Assurance Security Manager to play a key role in safeguarding critical systems, products and services.

This is a fantastic opportunity for an experienced cyber security professional with a background in Security Assurance, Information Assurance, Governance, Risk & Compliance (GRC) or Secure by Design to join a business delivering cutting-edge technology in a highly regulated environment.

You'll be responsible for ensuring security is embedded throughout the project lifecycle, overseeing certification and assurance activities, supporting critical customer programmes and providing security guidance across technical, operational and business functions.

The role offers a unique blend of governance, risk, assurance and technical security oversight, giving you the opportunity to work closely with engineering, infrastructure, project delivery and leadership teams while directly influencing the security posture of nationally significant programmes.

What You'll Be Doing

• Leading information and cyber security assurance activities across multiple projects and programmes
• Owning and maintaining security certifications including ISO 27001 and other contractual assurance requirements
• Producing and reviewing security artefacts including risk assessments, management plans, compliance reports and assurance documentation
• Supporting Secure by Design activities across infrastructure, cloud and application environments
• Coordinating vulnerability assessments, penetration testing and IT Health Checks (ITHCs), ensuring remediation activities are tracked and completed
• Reviewing technical designs and proposed solutions to ensure security requirements are met
• Supporting incident response, business continuity and resilience planning
• Working with suppliers and third parties to ensure contractual security obligations are maintained
• Contributing to governance forums, security working groups and executive-level reporting
• Providing pragmatic cyber security advice to both technical and non-technical stakeholders

What We're Looking For

• Experience working within Defence, Aerospace, Government, Critical National Infrastructure or other highly regulated environments
• Strong background in Information Assurance, Security Assurance, Cyber Risk, Governance, Risk & Compliance or Cyber Security Management
• Experience implementing or assuring ISO 27001 certified Information Security Management Systems
• Knowledge of Secure by Design principles and their application within project delivery environments
• Experience producing security documentation such as Security Management Plans, Risk Registers, Risk Assessments, Threat Models and Compliance Reports
• Experience coordinating ITHCs, vulnerability assessments and penetration testing activities
• Strong understanding of security frameworks and standards such as ISO 27001, NIST SP 800-53, CE+, DCC or similar
• Ability to communicate complex security risks clearly to a range of stakeholders
• Professional certification such as CISM, CISA, CISMP, ChCSP or CMIRM
• Eligibility to obtain SC Clearance (DV eligibility would be advantageous)

Why This Role?

For me, the biggest attraction is the opportunity to work on genuinely unique projects at the intersection of cyber security, aerospace and national capability.

This isn't a role where you'll simply maintain policies and complete audits. You'll be a key part of ensuring security is embedded into complex programmes from design through to delivery, working alongside talented technical teams and influencing decision-making at every level of the organisation.

You'll have the opportunity to take ownership of meaningful security initiatives, work with senior stakeholders and develop your expertise in a highly specialised industry that's continuing to grow and innovate.