Information Security Manager

JR United Kingdom; Bristol; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player in Logistics & Transportation is seeking an Information Security Manager to spearhead their cybersecurity strategy in Bristol. This pivotal role involves leading a security team, managing third-party operations, and enhancing security across critical infrastructure. You'll be responsible for implementing robust security controls, assessing risks, and ensuring compliance with industry standards. This is a unique opportunity to shape the security landscape and report directly to the IT Director, gaining valuable board-level exposure. If you are passionate about cybersecurity and ready to make a significant impact, this role is for you.

Benefits

Key role in shaping security strategy

Direct line to IT Director

Board-level exposure

Qualifications

• 6-7 years of experience in Information Security.
• Strong knowledge of security frameworks and risk management.

Responsibilities

• Lead and mature the Cyber Assurance Framework.
• Manage security team and third-party SOC operations.
• Monitor threats and drive security culture.

Skills

Information Security Management

Risk Assessment

Cyber Assurance Framework (CAF)

Incident Response

Security Policies Implementation

Communication Skills

Education

CISSP or equivalent

Tools

SIEM

IDS/IPS

Vulnerability Management

ISO27001

NIST CAF

OWASP

Job description

Social network you want to login/join with:

TRIA are supporting a leading Logistics & Transportation company in Bristol, seeking an Information Security Manager to drive cybersecurity strategy and enhance security across critical infrastructure.

You’ll be at the forefront of their information security strategy, ensuring the confidentiality, integrity, and availability of cyber and information security assets. You will lead the security team, manage third-party SOC operations, and be accountable for progressing the Cyber Assurance Framework (CAF).

The Role

• Lead and mature the Cyber Assurance Framework (CAF)
• Assess and mitigate risks across networks, systems, and applications
• Manage security team & third-party SOC operations
• Implement security controls, policies & awareness programs
• Monitor threats, lead incident response & drive security culture
• Report security posture & metrics to IT Director & leadership
• Oversee security assessments, audits & penetration testing

What You’ll Bring

• CISSP or equivalent + 6-7 years in InfoSec
• Experience maturing security programs & frameworks (ISO27001, NIST CAF, OWASP)
• Strong knowledge of SIEM, IDS/IPS, RBAC, vulnerability management
• Understanding of cloud, COTS/SaaS platforms & IoT security
• Ability to communicate risks & strategies at executive level
• Full driving license & personal transport

What’s On Offer

• Key role in shaping security strategy within critical infrastructure
• Direct line to IT Director with board-level exposure