Information Security Manager ( Manchester, Hybrid )

Michael Page; Ringway; Sur place; GBP 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Private healthcare

Bonus scheme

Enhanced pension

Annual training budget

Generous holiday allowance

Résumé du poste

Michael Page is recruiting for a senior Information Security and Compliance leader in the UK. You will own the ISMS, oversee data protection under UK GDPR, and drive AI governance across the organisation while managing supplier risk and audits.

You will report to senior leadership, engage with board-level stakeholders, and influence strategic security, privacy and governance decisions. A strong focus on data protection, risk management and compliance is required.

Qualifications

• Own and develop the ISMS including ISO 27001 and Cyber Essentials Plus.
• Lead data protection activities under UK GDPR, DPIAs and data-sharing.
• Establish and enhance AI governance frameworks.
• Manage cyber security risk via vulnerability management, pentests, incident response and monitoring.
• Oversee supplier assurance, due diligence and third-party risk management.
• Support client assurance activities and audits.
• Provide security/privacy sign-off for new products and initiatives.
• Present policies and risks to senior leadership and board-level stakeholders.

Responsabilités

• Own and develop the Information Security Management System (ISMS) and maintain key security certifications, including ISO 27001 and Cyber Essentials Plus.
• Lead data protection and privacy activities as the Data Protection Officer, providing guidance on UK GDPR compliance, DPIAs and data-sharing arrangements.
• Establish and enhance AI governance frameworks, ensuring responsible and compliant adoption of AI technologies.
• Manage cyber security risk through vulnerability management, penetration testing, incident response and security monitoring.
• Oversee supplier assurance, due diligence, contract reviews and third-party risk management.
• Support client assurance activities, responding to security and compliance assessments and audits.
• Provide security and privacy sign-off for new products, projects and business initiatives.
• Present policies, risks and compliance updates to senior leadership and board-level stakeholders.

Connaissances

ISMS leadership

Compliance programmes

ISO 27001

Cyber Essentials

UK GDPR

Auditing

Stakeholder management

AI governance

Description du poste

Client Details

Our client is a well-established UK-based software business delivering technology solutions to a large and trusted customer base. With a strong focus on innovation, data protection and responsible use of technology, the organisation is investing in strengthening its security, governance and compliance capabilities to support continued growth and customer confidence.

Description

• Own and develop the Information Security Management System (ISMS) and maintain key security certifications, including ISO 27001 and Cyber Essentials Plus.
• Lead data protection and privacy activities as the Data Protection Officer, providing guidance on UK GDPR compliance, DPIAs and data-sharing arrangements.
• Establish and enhance AI governance frameworks, ensuring responsible and compliant adoption of AI technologies.
• Manage cyber security risk through vulnerability management, penetration testing, incident response and security monitoring.
• Oversee supplier assurance, due diligence, contract reviews and third-party risk management.
• Support client assurance activities, responding to security and compliance assessments and audits.
• Provide security and privacy sign-off for new products, projects and business initiatives.
• Present policies, risks and compliance updates to senior leadership and board-level stakeholders.

Profile

• Strong experience leading information security and compliance programmes.
• Proven knowledge of ISO 27001, Cyber Essentials, UK GDPR and broader risk management frameworks.
• Experience managing audits, security assessments, supplier due diligence and remediation programmes.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels of the organisation.
• Experience in AI governance, privacy management or regulated technology environments would be highly advantageous

Job Offer

• Opportunity to own and shape the information security, privacy and governance agenda across the organisation.
• Broad remit covering cyber security, data protection, AI governance and supplier risk.
• Direct exposure to senior leadership and strategic decision-making.
• Competitive benefits package including private healthcare, bonus scheme, enhanced pension, annual training budget and generous holiday allowance.
• Supportive and collaborative culture with a strong focus on employee wellbeing, development and recognition