Cybersecurity & Compliance Manager

ZipRecruiter; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading recruitment platform is looking for a Cybersecurity & Compliance Manager to ensure the security and regulatory compliance of systems and processes. This role requires experience in cybersecurity, knowledge of NIST and ISO standards, and strong communication skills. The position is full-time with options for remote and hybrid work setups. Join a dynamic team that values collaboration and professional development.

Benefits

Competitive remuneration package

Personal and professional development programs

Supportive team environment

Qualifications

• At least 5 years of experience in information security, especially in security operations.
• Proven leadership or management experience in a technical environment.
• Technical experience with security tools/technologies.

Responsibilities

• Develop and implement security protocols.
• Conduct risk assessments and maintain compliance.
• Manage incident response and oversee security monitoring.

Skills

Experience in cybersecurity

Knowledge of NIST standards

Risk management expertise

Strong communication skills

Education

Bachelor's degree in Computer Science or related field

Relevant certifications (CISSP, CISM, CISA)

Tools

Microsoft Defender

Rapid7

Sentinel

Job description

Overview

To strengthen our IT department, we are currently looking for a Cybersecurity & Compliance Manager. This is a key role focused on ensuring the security and regulatory compliance of our systems and processes.

The position offers flexibility and can be fulfilled either remotely (within the Greater London area) or in a hybrid setup from our office in Dudley.

Position purpose

The Cybersecurity & Compliance Manager will lead Tosca’s efforts to ensure adherence to NIST CFS 2.0, ISO 27001, and other standards. This role focuses on developing security protocols, maintaining documentation, conducting risk assessments, and ensuring regulatory compliance. Responsibilities include managing security infrastructure, incident response, and promoting cybersecurity awareness. The position requires collaboration with Global IT, cross-functional teams, and third-party partners. Key qualifications include experience in cybersecurity and compliance, strong knowledge of NIST and ISO standards, risk management expertise, and effective communication skills.

This is a full-time role, with travel up to 30% of the time.

Responsibilities

• Implement security protocols and manage information security programs
• Report performance, exceptions, and outages to all audiences transparently.
• Align disaster recovery with business continuity plans.
• Ensure compliance with ISO27001, NIST CFS 2.0, and maintain ISMS.
• Identify risks, develop a comprehensive security plan.
• Test cyber-attacks regularly to address vulnerabilities.
• Monitor security trends, adapt strategies.
• Oversee incident monitoring, detection, response via SOC and MSSPs.
• Manage security tools like SIEM and endpoint protection.
• Lead incident response and post-incident analysis.
• Enforce policies for data privacy (GDPR & NIST).
• Conduct regular security audits.
• Manage vendor relationships and negotiate contracts.
• Report service performance to stakeholders.
• Coordinate with other Tosca functions for effective implementation.
• Other relevant responsibilities as required.

Requirements, Experience & Education

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field; a Master's degree is .
• At least 5 years of experience in information security, specifically within security operations, with proven experience in a leadership or management role.
• Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor) are highly desirable.
• Strong knowledge of security frameworks (e.g., ISO 27001, COBIT), security technologies, tools, and best practices across EU, UK, and USA
• Proficiency in risk management processes, vulnerability assessments, and incident response strategies.
• Current technical and hands-on experience with security tools and technologies, including Rapid7, Rubrik, Sentinel, and endpoint protection solutions like Microsoft Defender.
• Excellent analytical, problem-solving, and decision-making skills, with the ability to conduct post-incident analysis and implement corrective actions.
• Strong communication and interpersonal skills, capable of working effectively with diverse teams and stakeholders.
• Ability to stay current with security trends, emerging threats, and best practices in the cybersecurity landscape.
• Experience of manufacturing and/or supply chain industry is .
• Able to operate in a multinational corporation with several locations.

Competencies

• You have expertise within Customer/Relationship Management.
• You have excellent communication skills. You excel in conveying ideas clearly and effectively.
• You possess specialized knowledge and skills in your field.
• You have a collaborative spirit. You thrive in teamwork and enjoy working with others.
• You can analyze situations and make informed decisions
• You think ahead and plan for long-term success.

Our Offer

You will have a permanent contract with a competitive remuneration package in line with your knowledge and experience.

We continuously invest in your personal and professional development through our training & coaching programs.

You will join a dynamic and fast growing company that is part of a strong international group. We take pride in our green service and encourage our employees to participate in our growth and help us co-define the path to success. You will work in a fun environment with a supportive team that cares about each other and encourages collaboration at all levels.

Interested?

We cultivate a tight-knit team of smart people who care about their work and their colleagues. We believe this is a really exciting opportunity for someone who is up for a fast-paced challenge and is eager to become an integral member of our team.

Send us your CV and your letter of motivation in English. We’re looking forward to meeting you!

We value and equal opportunity. Applicants are welcomed on the basis of their individual merits as we do not discriminate on the grounds of , sex, , or racial , or belief, or . With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us.

External recruitment services/agencies will not be used for this position.