Information Security Manager (Defence)-MyTechnology

Serco; Metropolitan Borough of Solihull; On-site; GBP 55,000 - 75,000; Full time

Job summary

A global service provider is seeking an experienced Information Security Manager in the United Kingdom to oversee security for Defence contracts. You will ensure compliance with MOD Secure by Design standards and manage security incidents while fostering a proactive security culture. Ideal candidates will possess CISSP or CISM certifications, MOD policy knowledge, and experience in risk management. This role includes flexible working options and various benefits including a pension scheme and health support.

Benefits

Up to 6% contributory pension scheme

Flexible working options

Free onsite parking

Serco discounts on various services

Career development training

Health and wellbeing programs

Qualifications

• Comprehensive knowledge of current MOD policies and standards.
• Able to achieve and maintain formal UK Security Clearance.
• Willingness to travel to Serco and MOD sites is necessary.

Responsibilities

• Lead information security management across new Defence contracts.
• Conduct risk assessments and gap analyses.
• Oversee security assurance activities.
• Support project phases with security advice.
• Establish and manage Security Working Groups.
• Provide guidance on data protection compliance.
• Deliver security awareness training.

Skills

MOD policies and standards

ISO Lead Implementer / Auditor

CISSP or CISM certified

Data Protection Compliance knowledge

Risk management knowledge

Experience in delivery of security awareness training

Job description

At Serco, we unite the right people, technology, and partners to solve some of the world's most pressing and complex challenges. From defence and space to healthcare, justice, transport and beyond, our UK operations deliver critical services across government sectors—driven by expertise in service design, programme management, engineering, and more.

About the role

As an Information Security Manager, you’ll take operational ownership of information security for new Defence contracts, ensuring compliance with MOD Secure by Design (SbD) standards and data protection legislation. You’ll oversee security arrangements across Serco, its partners, and subcontractors, maintaining rigorous audit and assurance processes. This role is key to ensuring secure contract delivery, managing security incidents, and preparing for evolving MOD requirements. You’ll work closely with Data Protection Champions, senior leaders, and Defence stakeholders to uphold the highest security standards across the business

Key Accountabilities

• Lead information security management across new Defence contracts, ensuring compliance with MOD standards such as Secure by Design, DefStan -, and HMG / NCSC guidance.
• Conduct risk assessments and gap analyses using frameworks like NIST SP and ISO , developing action plans to address deficiencies.
• Oversee security assurance activities, including incident response, investigations, and engagement with external audit providers (, CHECK pen-tests and security health checks).
• Support project and design phases with security advice on technical, procedural, personnel, and physical controls, aligned to contractual requirements and MOD certifications.
• Establish and manage internal and external Security Working Groups to drive coordinated security efforts with Serco teams, partners, and suppliers.
• Provide guidance on data protection compliance, working closely with Data Protection Champions and promoting awareness across the Defence Business Unit.
• Deliver security awareness training and foster a proactive security culture within contracts, maintaining certifications like Cyber Essentials Plus and ISO .

Skills & Experience

• Comprehensive knowledge of and experience with current MOD policies and standards (, Secure by Design, JSP , DefStan - / DCPP)
• ISO Lead Implementer / Auditor
• CISSP or CISM certified
• Data Protection Compliance knowledge and privacy certifications
• Risk management knowledge utilising recognised frameworks, such as NIST
• Experience in the production and delivery of security awareness training
• A willingness to travel to Serco and MOD sites is necessary for the effective delivery of this role.
• The Infosec Lead (Defence Growth) must be able to achieve and maintain formal UK Security Clearance (SC

Why Serco

Serco’s purpose is to impact a better future - we bring together the right people, the right technology, and the right partners to create innovative solutions that deliver positive impact and address some of the most urgent and complex challenges facing governments globally. Our services are powered by more than , colleagues working across multiple sectors including defence, space, migration, justice, healthcare, transport, and customer services in four regions : UK & Europe, North America, Asia Pacific, and the Middle East.

In this position, your work is vital to the business, in terms of decisions and growth. You will gain a world of opportunity working for a globally operating business delivering essential services across 5 vital sectors, personal growth, achievement, and development won’t be hard to find. You'll also work with great people. You’ll find yourself working in a highly motivated, supportive environment where no two days are the same, with experienced colleagues who strive for excellence.

What we offer

• days annual leave plus bank holidays.
• Annual leave purchase scheme.
• Up to 6% contributory pension scheme
• Flexible working options.
• Free onsite parking.
• Serco discounts which include cinema, merlin entertainment and online shopping discounts, and discounts on mobile phone plans and leisure centre memberships.
• A range of benefits to support the health and wellbeing of you and your family such as Employee Assistance Programme, Health Cash Plans, free flu jabs and more.
• A wealth of career development training to suit your future aspirations. These range from role specific training, leadership coaching, formal study and much more to support you to build your career with Serco.
• A safe and supportive culture.
• A company passionate about diversity and inclusion.