Information Security Manager

SSA Digital Recruitment; Bedford; On-site; GBP 75,000 - 95,000; Full time

Job summary

SSA Digital Recruitment is seeking an experienced Cyber Security Manager to lead information security across networks, on-prem and cloud environments. You will partner with Infrastructure, IT Operations and Engineering to embed security by design, define controls, and drive security program maturity.

The role focuses on ISMS governance, risk management, and compliance with standards such as ISO 27001, while guiding vulnerability management, patching, IAM, and incident response in a hybrid

Qualifications

• Strong technical background in network security, infrastructure security and cyber security.
• Progressed from technical infrastructure or security engineering into Information Security, GRC or Security Assurance.
• Experience with ISO 27001, ISMS, security audits and information security frameworks.

Responsibilities

• Lead information security governance, risk management and compliance activities.
• Maintain and improve the ISMS and support ISO 27001 certification.
• Provide technical guidance on security architecture, vulnerability management and secure configuration.
• Oversee security audits, supplier assurance, and incident response planning.
• Collaborate with Infrastructure, IT Operations and Engineering to embed security across networks, servers, cloud environments and business systems.

Skills

Cyber Security

Information Security

Network Security

Infrastructure Security

Security Engineering

ISO 27001

ISMS

GRC

Vulnerability Management

Incident Response

Azure Security

Microsoft 365 Security

Active Directory

Job description

Cyber Security Manager / InfoSec Manager

Location Bedord / Hybrid 1-2 days a Week in the office

Salary >£75k

We're looking for an experienced Information Security Manager (Network / Infrastucture) with a strong technical background in network security, infrastructure security and cyber security. This role would suit someone who has progressed from a technical infrastructure or security engineering position into Information Security, Governance, Risk & Compliance (GRC) or Security Assurance.

Working closely with Infrastructure, IT Operations and Engineering teams, you'll help ensure security is embedded across networks, servers, cloud environments and business systems. You'll provide technical guidance on security architecture, vulnerability management, secure configuration, patching, identity and access management, firewalls, endpoint security and infrastructure hardening, while also leading information security governance, risk management and compliance activities.

You'll play a key role in maintaining and improving the Information Security Management System (ISMS), supporting ISO 27001 certification, managing security audits, supplier assurance, security incidents and business continuity planning. You'll also work with technical teams to assess vulnerabilities, review penetration testing results, oversee remediation activities and ensure security controls are implemented effectively across on-premise and cloud infrastructure.

To be successful, you'll have previous experience in Network Security, Infrastructure Security, Cyber Security Engineering, Systems Engineering or Infrastructure Engineering before moving into an Information Security or Cyber Security Management role. You'll have a strong understanding of firewalls, switches, routing, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, vulnerability management, security monitoring, networking principles and infrastructure hardening, alongside experience with ISO 27001, Cyber Essentials, Governance, Risk & Compliance (GRC), security audits and information security frameworks.

• Information Security Manager
• Cyber Security Manager
• Network Security
• Infrastructure Security
• Security Engineering
• Infrastructure Engineering
• Cyber Security
• ISO 27001
• ISMS
• Azure Security
• Microsoft 365 Security
• Active Directory
• Firewalls
• Network Infrastructure
• Vulnerability Management
• Patch Management
• Endpoint Security
• Security Operations
• Governance, Risk & Compliance
• GRC
• Security Assurance
• Security Audits
• Business Continuity
• Disaster Recovery
• Incident Response
• Cyber Essentials