Cyber Security & Risk Leader | Hybrid (2 days onsite) | Up to £74k

Xpertise Recruitment; Birmingham; Hybrid; GBP 67,000 - 81,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Xpertise Recruitment in Birmingham is seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives. The role offers hybrid work with 2 days onsite and exposure to senior stakeholders while guiding a small security team.

The ideal candidate will have senior IT security experience, strong risk analysis skills, and familiarity with ISO 27001 and Cyber Essentials, with CISSP/CISM preferred.

Qualifications

• Senior IT Security, cyber security or information security experience.
• Knowledge of risk management methodologies and threat analysis.
• Experience implementing and maintaining ISO 27001.
• Knowledge of Cyber Essentials and security best practices.
• Experience developing security policies, controls and procedures.
• Ability to communicate and influence stakeholders at all levels.
• CISSP, CISM or similar certification preferred.

Responsibilities

• Lead the IT Risk and Security function and manage a small team.
• Develop and deliver the technical security roadmap.
• Oversee IT security policies, controls and governance frameworks.
• Manage IT risk assessments, threat modelling and mitigation activities.
• Own the IT risk register and ensure risks are monitored and managed.
• Lead responses to significant cyber security incidents.
• Oversee vulnerability management and remediation programmes.
• Advise senior stakeholders and leadership teams as security SME.

Skills

IT Security

Risk Management

Security Governance

ISO 27001

Cyber Essentials

Stakeholder Communication

Security Certifications

Education

CISSP/CISM certification

Job description

Xpertise Recruitment in Birmingham is seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives. The role offers hybrid work with 2 days onsite and exposure to senior stakeholders while guiding a small security team.

The ideal candidate will have senior IT security experience, strong risk analysis skills, and familiarity with ISO 27001 and Cyber Essentials, with CISSP/CISM preferred.