Information Security Manager

ITAC Solutions; Birmingham; On-site; GBP 97,000 - 134,000; Full time

Benefits offered by this job

Lead cybersecurity team

Work across multiple businesses

Blend of strategy and hands-on work

Job summary

ITAC Solutions is seeking an Information Security Manager to lead the security program across multiple business units. You will set risk and governance direction, oversee incident response, and manage day-to-day security tooling while coaching engineers and coordinating with external vendors.

The role emphasizes influence and business communication; you will translate technical risk into actionable decisions for executives and business unit leaders, balancing strategy with hands-on security

Qualifications

• Bachelor’s degree in cybersecurity, information systems, computer science, or related field (or equivalent experience with a relevant certification)
• 5+ years in IT, including 3+ in a dedicated security role and 2+ leading or supervising a team
• Hands-on experience with risk assessment, incident management, and running projects
• Working knowledge of a recognized security framework (NIST, CMMC, CIS, or ISO 27001)
• Practical experience with SIEM, EDR, vulnerability management, firewalls, email security, IAM, and backup/recovery
• Experience securing a Microsoft environment (Active Directory/Entra ID, Microsoft 365, Defender, Intune)
• CISSP, CISM, CRISC, GIAC, or Microsoft security certifications (preferred)
• Exposure to OT/industrial security or security vendor management (preferred)

Responsibilities

• Own the security program end to end, including governance, risk reviews, and vendor risk
• Take the lead on incident response and oversee daily operation of the security toolset
• Supervise internal security staff and manage outsourced security providers
• Drive security projects to completion while building stronger project management habits on the team
• Mentor engineers and help them grow in targeted technical areas
• Work side by side with business unit leaders to move security initiatives forward
• Explain technical risk in plain business terms to non-technical executives

Skills

Risk assessment

Incident management

Security governance

Team leadership

Vendor management

Stakeholder communication

Education

Bachelor’s degree in cybersecurity, information systems, computer science, or related field

Tools

SIEM

EDR

Vulnerability management

Firewalls

Email security

IAM

Backup/Recovery

Active Directory/Entra ID

Microsoft 365

Defender/Intune

Job description

Our client, a multi-business organization, is looking for a hands‑on Information Security Manager to take charge of the security program across several independently run business units. You’ll set the direction for risk and governance, lead the response when incidents hit, and keep the security tools running day to day, all while coaching a team of engineers and holding outside security vendors accountable. Success here comes down to influence: you’ll spend as much time working with business unit leaders as you do with your own team, turning technical risk into decisions the business can act on.

C2C is not an option with this job opening and all applicants should be able work for any US Employer without sponsorship. Sponsorship is not provided and this person will not need to require sponsorship in the future.

Benefits & Extras

• Lead and grow a capable team of cybersecurity engineers
• Work across multiple businesses instead of being locked into one environment
• Blend of strategy and hands‑on security work

Compensation: $130K–$180K, based on experience

What You’ll Be Doing

• Own the security program end to end, including governance, risk reviews, and vendor risk
• Take the lead on incident response and oversee daily operation of the security toolset
• Supervise internal security staff and manage outsourced security providers
• Drive security projects to completion while building stronger project management habits on the team
• Mentor engineers and help them grow in targeted technical areas
• Work side by side with business unit leaders to move security initiatives forward
• Explain technical risk in plain business terms to non-technical executives

What You’ll Need to be Considered

• Bachelor’s degree in cybersecurity, information systems, computer science, or a related field (or equivalent experience paired with a relevant certification)
• 5+ years in IT, including 3+ in a dedicated security role and 2+ leading or supervising a team
• Hands‑on experience with risk assessment, incident management, and running projects
• Working knowledge of a recognized security framework (NIST, CMMC, CIS, or ISO 27001), including mapping controls and gathering evidence
• Practical experience with SIEM, EDR, vulnerability management, firewalls, email security, identity and access management, and backup/recovery
• Experience securing a Microsoft environment (Active Directory/Entra ID, Microsoft 365, Defender, Intune)
• Track record of managing and developing technical security staff
• Comfortable building relationships and influencing across a decentralized, multi‑business structure
• CISSP, CISM, CRISC, GIAC, or Microsoft security certifications (preferred)
• Exposure to OT/industrial security or security vendor management (preferred)