Information Security Manager | M365 & Compliance)

Major Manufacturing, Inc.; Crawley; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Pension with up to 8% employer contrib

28 days’ annual leave

Life assurance 4x salary

Income protection

Private medical insurance

Health cash plan

Gym discounts

Employee assistance programme

Job summary

Major Manufacturing, Inc. is seeking a Cyber Security Lead to own and drive the security programme from governance to technical implementation in West Sussex.

The role combines hands-on security with strategic oversight across ISO 27001 and Cyber Essentials certification, incident coordination, and collaboration with procurement and legal teams. You will manage vulnerability assessments, penetration testing, and security controls for Microsoft 365 and broader infrastructure, reporting directly

Qualifications

• Governance-focused information security leadership.
• Experience with ISO 27001 and Cyber Essentials certification work.
• Hands-on operational experience in a third line security role.

Responsibilities

• Own and govern the information security programme end‑to‑end.
• Lead certification work against ISO 27001 and Cyber Essentials and drive remediation to completion.
• Own the technical estate including Microsoft 365 security, email controls, and wider infrastructure.
• Manage vulnerability management, penetration testing and security assessments.
• Coordinate incident response as the primary technical contact and liaise with the outsourced SOC.
• Collaborate with procurement, legal and technical teams on cyber risk across suppliers and licensing partners.

Skills

ISO 27001

Cyber Essentials

Audit processes

Hands-on security

Job description

Cyber Security Lead — West Sussex (hybrid, 3 days on site) | c.£75,000, negotiable

No layer above you filtering the work. No layer below you holding the tooling. Most cyber security roles are one voice in a function. This one is the function.

Are you already doing this job without the title? Third line and ready to own a programme, or leading security in an organisation small enough that you’re still in the tooling yourself — both fit. The hands‑on experience is what counts.

You’d own the programme end to end for a UK technology business whose value sits almost entirely in its intellectual property — a substantial patent portfolio and long‑term licensing relationships with international industrial partners. That changes the conversation.

Security here isn’t a compliance cost to be argued for at budget time; it’s protection of the asset the company is built on.

Is this you?

Governance is the priority. Specifically:

• Information security best practice and certification — ISO 27001 and Cyber Essentials
• Detailed working knowledge of audit processes and procedures
• Hands‑on experience in a third line operational role

What you’d be doing (and why it’s broader than most)

Governance sits at the centre. Policies, standards and documentation to maintain and develop. Certification work against ISO 27001 and Cyber Essentials. Audit support, with the remediation actions owned by you through to completion rather than handed to someone else to chase.

Around that, you’d own the technical estate — core Microsoft 365 security, email security controls, wider infrastructure. Vulnerability management, penetration testing and security assessments. And you’d be the key technical contact during incidents, coordinating investigation and remediation.

The outsourced SOC reports into you as primary technical contact, so you’re managing a partnership rather than living in a ticket queue.

The piece that’s genuinely unusual: as the partner network expands, you’d work with procurement, legal and technical teams assessing cyber risk across suppliers and licensing partners. Few security roles at this level get that close to the commercial side of the business.

Where you’d be doing it

West Sussex, three days on site. A growing business where the stakeholders you need are reachable directly — no three‑layer approval path between you and a decision.

What you’d get

• c.£75,000, negotiable for the right governance depth
• Pension with up to 8% employer contribution (3% from you) via salary sacrifice, with the National Insurance saving passed back to you
• 28 days’ annual leave plus public holidays
• Life assurance at 4x salary, plus income protection
• Private medical insurance
• Health cash plan — dental and therapies for you and your children, plus gym discounts
• Employee assistance programme covering counselling and legal support