Information Security Lead for Major Infrastructure Programs

Mace; Greater London; On-site; GBP 90,000 - 125,000; Full time

Job summary

Mace Limited - Construction Projects in London is seeking a skilled Information Security Lead to manage the ISMS across two major UK public infrastructure programmes. You will ensure compliance with contractual information security and cyber security obligations, and maintain ISO 27001 and Cyber Essentials Plus certifications.

The role leads the ICT Security team, drives data protection, incident response, audits, and security awareness.

Qualifications

• Minimum 5 years' experience in information security management.
• Strong knowledge of IS principles, frameworks and risk management.
• Ability to develop and enforce IS policies.
• Experience in IT security infrastructure, including access controls, network security, endpoint protection, and secure communications.
• Cyber Essentials auditing.
• Hold a recognised information security qualification such as CISSP, CISM or ISO/IEC 27001 Lead Implementer / Lead Auditor desirable.
• Compliance for BPSS clearance.

Responsibilities

• Develop and own information security strategy across major UK programmes.
• Ensure compliance with client contractual information security obligations and cyber security requirements.
• Maintain disaster recovery and incident management plans.
• Lead ICT Security team in implementing secure IT systems.
• Lead data protection compliance and breach handling.
• Manage data retention systems across the project.
• Own ISMS policies and embed them across the project.
• Provide IS performance reporting to Senior Leadership and client.
• Maintain ISO 27001, PAS1192-5 and Cyber Essentials Plus certifications.

Skills

IS governance

Risk management

Policy development

Security architecture

Cyber Essentials auditing

Stakeholder engagement

Team leadership

Education

Bachelor’s degree or equivalent

Job description

Mace Limited - Construction Projects in London is seeking a skilled Information Security Lead to manage the ISMS across two major UK public infrastructure programmes. You will ensure compliance with contractual information security and cyber security obligations, and maintain ISO 27001 and Cyber Essentials Plus certifications.

The role leads the ICT Security team, drives data protection, incident response, audits, and security awareness.