Information Security Manager

RESQ; Hull and East Yorkshire; Presencial; GBP 60 000 - 85 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Company Pension

22 days holidays + bank holidays

Staff Benefit Portal

Employee Assistance Programme

Birthday day off

Resumo da oferta

ResQ is seeking an experienced Information Security Manager to own the Information Security function across ResQ Ltd and the related tech company, based at our Hull site. You will drive security posture, maintain PCI DSS and Cyber Essentials Plus compliance, reduce risk, and raise security maturity across the business.

Responsibilities include governance, policy maintenance, risk management, vulnerability management, incident reviews, and security awareness initiatives.

Qualificações

• Experience leading an information security programme across multiple entities.
• Strong knowledge of PCI DSS and Cyber Essentials Plus.
• Proven ability to drive security maturity and risk reduction.

Responsabilidades

• Govern security strategy and align roadmaps with business objectives.
• Own PCI DSS compliance across two entities and coordinate audits.
• Manage Cyber Essentials and Cyber Essentials Plus certifications and remediation.
• Maintain the information security risk register and conduct regular risk assessments.
• Oversee vulnerability management, incident response, and post-incident reviews.
• Develop and deliver security awareness initiatives across the organisation.
• Identify and implement continuous improvements to security controls.

Descrição da oferta de emprego

Information Security Manager

ResQ are an outsourced contact centre with a difference. We pride ourselves on delivering high-quality specialist services as true partners tohighly recognised, leading brands in the energy, telecoms, digital, and media sectors.

At ResQ,we’reall about innovation, inclusion, and putting our people first. We are deeply committed to our team and culture, striving to remain a top employer of choice. We believe in celebrating high achievers, embracing individuality, and making work more than just a job. Our vibrant workplace culture encourages everyone to thrive and contribute to our success. As a certified ‘Great Place to Work’ employer,we’recommitted to creating an environment where everyone can shine.

We are seeking an experienced Information Security Manager to take ownership of the Information Security function across two companies, ResQ Ltd and the separate tech company. This role will be responsible for maintaining and advancing our security posture, ensuring continued compliance with PCI DSS and Cyber Essentials Plus requirements, reducing organisational risk, and driving security maturity across the business. This position is fully office-based at our Hull site. Please apply only if you can commit to working from this location on a full-time basis.

Your responsibilities will include:

Security Governance & Strategy

• Own and manage the Information Security programme across both companies.
• Develop and deliver the Information Security roadmap aligned to business objectives.
• Maintain and improve security policies, standards, procedures and controls.
• Report regularly to senior leadership on security posture, risks, trends and compliance status.
• Champion a security-first culture throughout the organisation.

PCI DSS Compliance

• Act as the primary owner for PCI DSS compliance across both businesses.
• Coordinate annual PCI assessments and audits.
• Manage evidence gathering, policy reviews and remediation activities.
• Ensure security controls remain effective and aligned to PCI DSS requirements.
• Work with internal teams and third-party suppliers to maintain compliance.

Cyber Essentials Plus

• Own the Cyber Essentials and Cyber Essentials Plus certifications.
• Coordinate annual assessments and remediation activities.
• Continuously monitor compliance against Cyber Essentials requirements.
• Drive improvements that exceed minimum certification standards.

Risk Management

• Maintain the Information Security risk register.
• Conduct regular risk assessments across systems, suppliers and business processes.
• Track remediation actions and ensure risks are managed appropriately.
• Provide guidance on risk treatment and mitigation strategies.

Security Operations

• Oversee vulnerability management activities.
• Review security alerts, monitoring outputs and threat intelligence.
• Coordinate remediation activity with Infrastructure, Development and Operational teams.
• Support investigation and response to security incidents.
• Lead post-incident reviews and lessons learned activities.

Security Awareness

• Develop and deliver security awareness initiatives.
• Promote secure working practices across all departments.
• Support phishing simulation exercises and targeted training programmes.

Continuous Improvement

• Identify opportunities to strengthen security controls and processes.
• Deliver measurable improvements in security maturity year-on-year.
• Evaluate and implement new security technologies where appropriate.
• Establish security metrics and KPIs to demonstrate progress and effectiveness.

Why Join ResQ?

• Opportunity to shape a modern, forward-thinking InfoSec strategy
• Be part of an organisation that values people, progression, and potential
• Check out our website for more information: https://resqcs.co.uk

We offer:

• Automatic enrolment into the Company Pension Scheme
• 22daysholidaysplus bank holidays
• Access to Staff Benefit Portal
• Employee Assistance Programme
• Paid day off on your birthday (if it falls on a working day)