Information Security Lead

Harvey Nash Group; Birmingham; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

A leading recruitment firm in Birmingham is seeking an Information Security Lead to mature the security posture of a B2B SaaS scaleup. This hybrid role involves owning the security strategy, conducting risk assessments, and driving compliance initiatives like ISO 27001 and GDPR. The ideal candidate will have strong knowledge of security frameworks, excellent interpersonal skills, and security certifications such as CISSP or CISM. Competitive salary of up to £80,000 plus a 10% bonus.

Qualifications

• Strong knowledge of security frameworks such as ISO 27001 and NIST.
• Technical understanding of web app vulnerabilities and testing methodologies.
• Proven ability to develop and implement security policies.

Responsibilities

• Own and evolve the information security strategy, policies, and procedures.
• Lead risk assessments and manage the security risk register.
• Drive compliance initiatives including ISO 27001 and GDPR.
• Oversee vulnerability management and coordinate penetration testing.

Skills

Security frameworks knowledge (ISO 27001, NIST)

Experience with GDPR and client compliance

Technical web app vulnerability understanding

Policy development and implementation

Risk assessment skills

Interpersonal and influencing skills

Collaborative mindset

Security certifications (CISSP, CISM, CompTIA Security+)

SaaS experience

Job description

Overview

Consultant | Cyber Security / Tech Recruitment | Harvey Nash

Title: Information Security Lead

Location: Birmingham, West Midlands

Salary: Up to £80,000 + 10% Bonus

Working arrangements: Hybrid - 1/2 days on site

Harvey Nash is partnering with an exciting B2B SaaS scaleup to recruit an Information Security Lead. The organisation is innovative in the logistics space. This role is responsible for maturing the security posture across the business and reporting to the CPTO.

Responsibilities

• Own and evolve the information security strategy, policies, and procedures.
• Lead risk assessments and manage the security risk register.
• Drive compliance initiatives including ISO 27001, GDPR, and client-specific standards.
• Oversee vulnerability management and coordinate penetration testing.
• Develop and execute incident response plans.
• Deliver engaging security awareness training across the business.
• Evaluate and manage third-party vendor security risks.
• Collaborate with engineering teams on monitoring and alerting systems.
• Stay ahead of emerging threats and industry trends.
• Support business continuity and disaster recovery planning.
• Be the go-to contact for security queries from corporate clients, prospects, and auditors.

Qualifications

• Strong knowledge of security frameworks (ISO 27001, NIST).
• Experience with GDPR and corporate client compliance requirements.
• Technical understanding of web app vulnerabilities and testing methodologies.
• Proven ability to develop and implement security policies and procedures.
• Skilled in risk assessment and stakeholder communication.
• Excellent interpersonal and influencing skills across all levels.
• Collaborative mindset with experience working across Engineering, IT, Legal, etc.
• Security certifications (CISSP, CISM, CompTIA Security+) are highly desirable.
• SaaS experience is a plus.

Additional details

Seniority level: Not Applicable

Employment type: Full-time

Job function: Information Technology

Industries: Software Development

How to apply

If this sounds like you or you would like to know more, apply directly or email an updated CV for a confidential chat around this exciting role and company: [e-mail]