Information Security Manager

Serco Group plc; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading public service organization is seeking an Information Security Manager for the London Cycle Hire Scheme. The role requires operational ownership of security processes and compliance with ISO27001 and data protection legislation. The ideal candidate is people-focused, engaging, and experienced in cybersecurity, with the ability to influence stakeholders and manage complex environments. Remote work options are available.

Benefits

Flexible working considered

Pension - 6%

Discounts on services and products

Career development training

Employee Assistance Programme

Qualifications

• ISO27001 and cyber security certifications required.
• Experience in risk management and multi-supplier environments needed.
• Ability to communicate complex security concepts effectively.

Responsibilities

• Own all information security processes for the LCHS contract.
• Lead risk management, incident response, and investigations.
• Support GDPR compliance and maintain ISO27001 alignment.

Skills

ISO27001 Lead Implementer and/or Lead Auditor

Cyber security formal certification (e.g. CISM, CISSP)

Strong understanding of data protection legislation (GDPR/DPA 2018)

Risk management experience

Experience managing security in complex, multi-supplier environments

Ability to translate complex security concepts into clear, actionable guidance

Strong relationship-building and stakeholder engagement skills

Ability to work independently, organise workload, and deliver to deadlines

Eligible for BPSS clearance

Job description

Information Security Manager - London Cycle Hire Scheme
Hybrid - London
Full Time, Permanent

Serco is proud to operate the London Cycle Hire Scheme - one of the capital's most visible and impactful public services. We are now recruiting a brand-new Information Security Manager (ISM) to help shape the future security posture of this high-profile, citizen-facing contract.

This isn't a role about sitting behind policies or focusing solely on tech. We need someone who can build strong relationships, steer suppliers, engage directly with our customer, and roll out practical, people-focused security improvements from day one. You will set the foundations, mature our processes, drive awareness, and ensure cyber security and data protection are embedded into everything we deliver.

You will take operational ownership and accountability for all information security management processes across Serco delivery of the London Cycle Hire Scheme (LCHS). You'll maintain alignment with ISO27001, ensure compliance with data protection legislation, and manage information security and data protection activities in partnership with the Data Protection Champion (DPC), the Cyber Assurance Lead, and contract leadership.

As part of this you'll:

• Take operational ownership of all information security processes across the LCHS contract.
• Lead information security risk management, incident response, and investigations.
• Maintain ISO27001 alignment and support GDPR/DPA 2018 compliance with the DPC.
• Establish and run an Information Security Management Forum.
• Drive a proactive security culture through training, awareness, and engagement.
• Manage and coordinate assurance activities, including audits, pen tests, and IT Health Checks.
• Work directly with the customer and suppliers to ensure security obligations are met and understood.
• Provide clear, accessible security advice to stakeholders at all levels.
• Conduct gap analyses against ISO27001 and HMG standards and produce remediation plans.
• Support new projects with Secure by Design guidance, including technical, procedural, physical, and personnel controls.
• Oversee documentation, risk registers, and security governance records.
• Recommend appropriate security controls, technologies, and improvements.
• Maintain all information security and data protection documentation and ensure ongoing compliance.

What you'll need to do the role:

We are looking for someone who is credible, engaging, pragmatic, and people-focused, with the ability to guide suppliers and influence stakeholders at every level.

Essential Skills & Qualifications:

• ISO27001 Lead Implementer and/or Lead Auditor.
• Cyber security formal certification (e.g. CISM, CISSP).
• Strong understanding of data protection legislation (GDPR/DPA 2018).
• Risk management experience.
• Experience managing security in complex, multi-supplier environments.
• Ability to translate complex security concepts into clear, actionable guidance.
• Strong relationship-building and stakeholder engagement skills.
• Ability to work independently, organise workload, and deliver to deadlines.
• Eligible for BPSS clearance.

Desirable:

• Experience supporting UK government or public sector contracts.
• Experience in customer-facing roles.

Why Serco:

Meaningful and vital work: In this position, your work is vital to the business, in terms of decisions and growth. You will gain a world of opportunity working for a globally operating business delivering essential services across 5 vital sectors, personal growth, achievement and development won't be hard to find. You'll also work with great people. You'll find yourself working in a highly motivated, supportive environment where no two days are the same, with experienced colleagues who strive for excellence.

What we offer:

• Flexible working considered
• Pension - 6%
• Chance to contribute to innovation in the public services
• A company passionate about diversity and inclusion
• Serco discounts which include cinema, merlin entertainment and online shopping discounts, and discounts on mobile phone plans and leisure centre memberships.
• A range of benefits to support the health and wellbeing of you and your family such as Employee Assistance Programme, Simply Health Cash Plans, and more.
• A wealth of career development training to suit your future aspirations. These range from role specific training, leadership coaching, formal study and much more to support you to build your career with Serco.
• A safe and supportive culture.

About Serco

At Serco, not only is the nature of the work we do important, everyone has an important role to play, from caring for vulnerable people to managing complex public services. We are a team of 50,000 people responsible for delivering essential public services around the world in areas including defence, transport, justice, immigration, healthcare and citizen services. We are innovators, committed to redesigning and improving public services for the benefit of everyone.

By joining Serco you will have unlimited access to our Global Employee Networks - SercoInspire (Gender), SercoEmbrace (Multicultural), SercoUnlimited (Disability) and In@Serco (LGBT & Networks). Serco Employee Networks, led by colleagues who are passionate about diversity, inclusion and belonging.

Apply

Please click on the apply button to complete your application. Occasionally we receive a large volume of applications for our roles and when that happens we sometimes bring the closing date forward, so please apply promptly to avoid disappointment.

At Serco, we see people first and foremost for their performance and potential. We are committed to building a diverse and inclusive organisation that supports the needs of all. As such we will make reasonable adjustments at interview through to employment for our candidates and strongly encourage applications from a diverse candidate pool. We are open to discussions around flexibility and flexible working. We operate a hybrid work structure in many of our business areas. We are proudly Disability Confident Leader employers and holder of the Gold Inclusive Employer Standard. Disabled applicants who meet the minimum criteria for the job will be given the opportunity to demonstrate their abilities at an interview. For help with your application please contact 0345 010 4000.

At Serco we support fair access to employment for those with unspent criminal convictions through the 'Ban the Box' pledge (some may be exempt due to the nature of the role and the security clearance required). Please contact our recruitment team directly on 0345 010 4000 to discuss.