Information Security Lead for Critical Infrastructure

Mace; Birmingham; On-site; GBP 85,000 - 120,000; Full time

Job summary

Mace Limited - Construction Projects in Birmingham seeks an Information Security Lead to maintain and continuously improve the ISMS, ensuring compliance with client and regulatory obligations across major UK infrastructure programmes.

You will own security policies, lead incident response, manage audits and drive data protection, disaster recovery and security awareness across the project team and supply chain.

Qualifications

• Minimum 5 years' experience in an information security management role.
• Strong knowledge of IS principles, frameworks and risk management.
• Ability to develop and enforce IS policies.
• Experience in IT security infrastructure, including access controls, network security, endpoint protection, and secure communications.
• Cyber Essentials auditing.
• Hold a recognised information security qualification such as CISSP, CISM or ISO/IEC 27001 Lead Implementer / Lead Auditor.
• Compliance for BPSS clearance.
• Confident presenting to senior leadership, clients and non-technical audiences.
• Line management experience.

Responsibilities

• Develop and own information security strategy aligned with requirements.
• Ensure compliance with contractual information security obligations.
• Maintain disaster recovery and incident management processes.
• Lead the ICT Security team implementing secure IT systems.
• Lead Data Protection Compliance through systems auditing.
• Manage data retention systems across the project.
• Own ISMS policies and ensure embedding across the project.
• Provide IS performance reporting to Senior Leadership and client.
• Maintain ISO 27001, PAS1192-5 and Cyber Essentials Plus certifications.
• Oversee security across the supply chain with audits.
• Lead incident response and breach handling.
• Oversee security awareness training.
• Collaborate with other disciplines to embed security.
• Undertake system access reviews and risk assessments.
• Manage relationships with external auditors, regulators and vendors.
• Keep ahead of evolving threats and frameworks.
• Manage Contractor Assessment, onboarding and IT exit Plans.
• Training and developing project team and contractors around ICSC awareness.

Skills

Information security strategy

Risk management

Policy development

Leadership & stakeholder communication

IS governance reporting

Education

Bachelor's degree or equivalent

CISSP / CISM / ISO 27001 Lead Implementer

Tools

Access controls

Network security

Endpoint protection

Secure communications

Job description

Mace Limited - Construction Projects in Birmingham seeks an Information Security Lead to maintain and continuously improve the ISMS, ensuring compliance with client and regulatory obligations across major UK infrastructure programmes.

You will own security policies, lead incident response, manage audits and drive data protection, disaster recovery and security awareness across the project team and supply chain.