Information Security Manager

JR United Kingdom; Bath; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading Logistics & Transportation company in Bristol is hiring an Information Security Manager to enhance cybersecurity and lead their security team. The role involves managing risk, implementing controls, and communicating strategy with executive levels. The position offers a direct line to the IT Director, shaping the security strategy of critical infrastructure.

Benefits

Key role in shaping security strategy

Direct line to IT Director with board-level exposure

Qualifications

• 6-7 years in Information Security field.
• Experience with ISO27001, NIST CAF, OWASP.
• Strong knowledge of cloud and SaaS security.

Responsibilities

• Lead and mature the Cyber Assurance Framework (CAF).
• Manage security team and third-party SOC operations.
• Implement security controls and policies.

Skills

Information Security

Cyber Assurance Framework

Risk Assessment

Incident Response

Communication

Education

CISSP or equivalent

Tools

SIEM

IDS/IPS

Vulnerability Management

Job description

Social network you want to login/join with:

TRIA are supporting a leading Logistics & Transportation company in Bristol, seeking an Information Security Manager to drive cybersecurity strategy and enhance security across critical infrastructure.

You’ll be at the forefront of their information security strategy, ensuring the confidentiality, integrity, and availability of cyber and information security assets. You will lead the security team, manage third-party SOC operations, and be accountable for progressing the Cyber Assurance Framework (CAF).

The Role

• Lead and mature the Cyber Assurance Framework (CAF)
• Assess and mitigate risks across networks, systems, and applications
• Manage security team & third-party SOC operations
• Implement security controls, policies & awareness programs
• Monitor threats, lead incident response & drive security culture
• Report security posture & metrics to IT Director & leadership
• Oversee security assessments, audits & penetration testing

What You’ll Bring

• CISSP or equivalent + 6-7 years in InfoSec
• Experience maturing security programs & frameworks (ISO27001, NIST CAF, OWASP)
• Strong knowledge of SIEM, IDS/IPS, RBAC, vulnerability management
• Understanding of cloud, COTS/SaaS platforms & IoT security
• Ability to communicate risks & strategies at executive level
• Full driving license & personal transport

What’s On Offer

• Key role in shaping security strategy within critical infrastructure
• Direct line to IT Director with board-level exposure