Information Security Manager ( Manchester, Hybrid )

Michael Page Technology; Manchester; On-site; GBP 90,000 - 130,000; Full time

Job summary

Michael Page Technology seeks an experienced Information Security and Data Governance leader to drive the security, privacy and governance framework for a UK software business. As Data Protection Officer you will oversee UK GDPR compliance, data sharing, supplier assurance and information security certifications.

You will own the ISMS (ISO 27001, Cyber Essentials Plus), lead audits and risk management, establish AI governance, and report to senior stakeholders and the board.

Qualifications

• Strong experience leading information security and compliance programmes.
• Knowledge of ISO 27001, Cyber Essentials, UK GDPR and risk management frameworks.
• Experience managing audits, supplier due diligence and remediation programmes.
• Excellent stakeholder management and communication skills.
• Experience in AI governance or regulated technology environments advantageous.

Responsibilities

• Own and evolve ISMS and maintain key security certifications (ISO 27001, Cyber Essentials Plus).
• Lead data protection and privacy activities as the Data Protection Officer (UK GDPR, DPIAs).
• Establish and enhance AI governance frameworks and manage cyber security risk.
• Oversee supplier assurance, due diligence and third‑party risk management.
• Support client assurance activities and respond to security assessments and audits.
• Provide security and privacy sign‑off for new products and initiatives.
• Present policies and compliance updates to senior leadership and board.

Skills

Information security leadership

Data governance

Stakeholder management

UK GDPR / data protection

AI governance

Job description

An exciting opportunity for an experienced Information Security and Data Governance professional to lead and evolve a company's security, privacy and governance framework. Acting as the organisation's Data Protection Officer, you will oversee regulatory compliance, cyber security, supplier assurance, AI governance and information security certifications, while partnering with senior stakeholders to protect both the business and its customers.

Client Details

Our client is a well-established UK-based software business delivering technology solutions to a large and trusted customer base. With a strong focus on innovation, data protection and responsible use of technology, the organisation is investing in strengthening its security, governance and compliance capabilities to support continued growth and customer confidence.

Description

• Own and develop the Information Security Management System (ISMS) and maintain key security certifications, including ISO 27001 and Cyber Essentials Plus.
• Lead data protection and privacy activities as the Data Protection Officer, providing guidance on UK GDPR compliance, DPIAs and data-sharing arrangements.
• Establish and enhance AI governance frameworks, ensuring responsible and compliant adoption of AI technologies.
  Manage cyber security risk through vulnerability management, penetration testing, incident response and security monitoring.
• Oversee supplier assurance, due diligence, contract reviews and third‑party risk management.
• Support client assurance activities, responding to security and compliance assessments and audits.
• Provide security and privacy sign‑off for new products, projects and business initiatives.
• Present policies, risks and compliance updates to senior leadership and board‑level stakeholders.

Profile

• Strong experience leading information security and compliance programmes.
• Proven knowledge of ISO 27001, Cyber Essentials, UK GDPR and broader risk management frameworks.
• Experience managing audits, security assessments, supplier due diligence and remediation programmes.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels of the organisation.
• Experience in AI governance, privacy management or regulated technology environments would be highly advantageous

Job Offer

• Opportunity to own and shape the information security, privacy and governance agenda across the organisation.
• Broad remit covering cyber security, data protection, AI governance and supplier risk.
• Direct exposure to senior leadership and strategic decision‑making.
• Competitive benefits package including private healthcare, bonus scheme, enhanced pension, annual training budget and generous holiday allowance.
• Supportive and collaborative culture with a strong focus on employee wellbeing, development and recognition.