Information Security Program Lead

Sothebys; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Sotheby’s is seeking an Information Security Manager to lead and execute major components of the company’s information security strategy. Reporting to the CISO, you will drive initiatives, balance business objectives with risk, and work across global teams to strengthen controls and governance.

You will perform risk assessments, manage audits, draft policies, and lead incident response, while continuously improving security practices for a historic, globally renowned brand.

Qualifications

• Hands-on information security experience.
• Ability to explain risk in business terms.
• Experience with risk assessments and audits.
• Knowledge of CIS, ISO 27001, NIST frameworks.

Responsibilities

• Drive security initiatives with IT and business units.
• Lead continuity and disaster recovery planning.
• Lead internal/external security audits, liaise with auditors.
• Draft/update security policies, processes, standards.
• Oversee risk assessments and vendor risk.
• Maintain risk registers and exec dashboards.
• Coordinate control validation and testing across domains.
• Mentor junior analysts and engineers.

Skills

Information security

Risk assessment

Audits

Policy drafting

Vendor risk

Incident response

Communication

Education

CS/Engineering/Cybersecurity degree

Job description

Sotheby’s is seeking an Information Security Manager to lead and execute major components of the company’s information security strategy. Reporting to the CISO, you will drive initiatives, balance business objectives with risk, and work across global teams to strengthen controls and governance.

You will perform risk assessments, manage audits, draft policies, and lead incident response, while continuously improving security practices for a historic, globally renowned brand.