Information Security Manager - Risk Management

weServed; Portsmouth; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Generous holiday allowance

Pension scheme with life assurance

Digital GP and health check

Aviva DigiCare+

Employee shopping portal

Payment of professional fees

10 days special paid leave for Reserv

Holiday Trading benefit

Be Kind Day

Job summary

Babcock is seeking an Information Security Manager - Risk Management to strengthen cyber resilience across a global organisation. You will lead the development and continuous improvement of information and cyber security risk management practices to protect critical services and sensitive information.

You'll collaborate with senior leaders and technical specialists to identify, assess and manage risks, influence strategic decisions and support regulatory compliance.

Qualifications

• Significant experience in information security, cyber security or risk management.
• Experience operating enterprise risk management processes.
• Strong understanding of cyber risk assessment methodologies and governance.
• Experience developing risk treatment and remediation plans.
• Ability to communicate technical security issues in business risk language.

Responsibilities

• Lead identification, assessment and management of cyber and information security risks.
• Develop and improve the cyber security risk management framework and governance.
• Partner with business leaders to ensure effective risk treatment and informed decisions.
• Present risk insights, recommendations and assurance reporting to senior stakeholders.
• Support security assurance activities aligning with regulatory and contractual requirements.

Skills

Information Security

Cyber Security

Risk Management

Governance

Stakeholder Communication

Regulatory Compliance

Education

Bachelor's degree in Information Security

CISSP (advantageous)

CISM (advantageous)

CRISC (advantageous)

Job description

Job Title: Information Security Manager Risk Management

Location: UK, Flexible + Hybrid Working Arrangements

Compensation: Competitive Salary + Benefits

Role Type: Full time / Permanent

Role ID: SF75114

Shape Cyber Resilience. Protect What Matters. Create a Safer Future.

At Babcock, we’re working to create a safe and secure world, together. If you join us, you can play your part as an Information Security Manager - Risk Management at one of our main UK locations, including Bristol, Devonport, London, Leicester, Portsmouth, Rosyth or Warrington.

The role

As Information Security Manager - Risk Management, you'll play a critical role in strengthening cyber resilience across a global organisation that supports defence, aerospace and engineering programmes of national importance. This is an exciting opportunity to lead the development and continuous improvement of information and cyber security risk management practices, helping to protect critical services, infrastructure and sensitive information.

Working across the business, you'll collaborate with senior leaders, project teams and technical specialists to ensure cyber and information security risks are effectively identified, assessed and managed. Your expertise will influence strategic decision-making, support regulatory compliance, and contribute to the delivery of Babcock's wider cyber security strategy.

Day-to-day you'll be responsible for:

• Leading the identification, assessment and management of cyber and information security risks across the organisation.
• Developing and continuously improving the cyber security risk management framework, policies and governance processes.
• Partnering with business leaders, project teams and technical specialists to ensure effective risk treatment and informed decision-making.
• Presenting risk insights, recommendations and assurance reporting to senior stakeholders.
• Supporting security assurance activities and ensuring alignment with regulatory, contractual and business requirements

This role is full time, 37.5 hours per week and can be based at any of our main UK locations. Hybrid working arrangements are available.

Essential experience of the Information Security Manager - Risk Management:

• Significant experience in Information Security, Cyber Security, Risk Management or Governance roles.
• Experience operating enterprise risk management processes.
• Strong understanding of cyber risk assessment methodologies, information security governance, security controls and assurance practices.
• Experience developing risk treatment and remediation plans within complex organisations.
• Ability to communicate technical security issues in clear business risk language and present findings to senior stakeholders.

Qualifications for the Information Security Manager - Risk Management:

Essential:

• Relevant professional experience demonstrating expertise in information security, cyber security or risk management.

Advantageous:

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified in Risk and Information Systems Control (CRISC).
• Equivalent information security, governance or risk management qualifications.

Security Clearance

The successful candidate must be able to achieve and maintain Standard (BPSS) and Security Check (SC) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk).

What we offer

• Generous holiday allowance
• Matched contribution pension scheme, with life assurance
• Access to a Digital GP, annual health check, and nutritional consultations through Aviva DigiCare+
• Employee shopping savings portal
• Payment of Professional Fees
• Reservists in the armed forces receive 10-days special paid leave
• Holiday Trading is a benefit that allows UK Babcock employees to buy additional leave or to sell up to one working week of annual leave from their annual entitlement. This Window opens February through to March annually.
• ‘Be Kind Day’ enables employees to take one working day's paid leave a year (or equivalent hours) to undertake volunteering work with their chosen organisation or registered charity

Babcock

We’re Babcock — a global FTSE 100 organisation with over 26,000 people working together to make a difference.

Here, you’ll be part of something bigger. From initial design to final decommissioning, your work will contribute to products and services that are essential to national security and public infrastructure. Together, we’re building a future that lasts — not just through the impact we make, but through meaningful careers that respect your work-life balance.

We call that lifetime engineering.

Join us and see how far we can go, together.

We are a disability confident committed employer. If you have a disability or need any reasonable adjustments during the application and selection stages, please email [e-mail] with the subject header ‘Reasonable adjustments requirement’. We’re committed to building an inclusive culture where everyone’s free to thrive. We are happy to talk about flexible working – please ask about alternative patterns of work at interview.

Closing date: 11/08/2026

#BABDESTNUC