Information Security Strategy & Risk Lead

Millennium Hotels - Lakefront Anchorage; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Pension salary sacrifice scheme

Career development and salary reviews

Volunteer days

Complimentary meals prepared for you

Accommodation and F&B discounts

Life assurance

Refer a friend scheme

Job summary

Millennium Hotels and Resorts UK is seeking an Information Security Manager to blend hands-on security with governance and risk management. You will drive security architecture decisions, lead incident response, and support secure digital transformation across the UK properties.

The role requires coordinating PCI-DSS compliance, guiding stakeholders with risk-based advice, and promoting security awareness. You will partner with IT, HR, and business units to strengthen the group’s security

Qualifications

• Hands-on information security expertise with governance and risk management.
• Experience leading PCI-DSS compliance programs.
• Ability to communicate risk-based guidance to senior leadership.

Responsibilities

• Formulate, develop and implement IT Security strategy, policies, programs and procedures aligned to UK operations.
• Lead and drive PCI‑DSS Compliance program with stakeholders.
• Keep up to date on new and emerging security technologies and their relevance.
• Track and document incidents from detection to resolution for future analysis.
• Collaborate with hotel IT and HR to educate and raise security awareness.
• Implement security controls and measures to mitigate threats.
• Perform periodic IT Security audits across UK properties for policy compliance.

Skills

Security governance

Incident response

Vulnerability management

Security architecture

Stakeholder communication

Risk management

Job description

Millennium Hotels and Resorts UK is seeking an Information Security Manager to blend hands-on security with governance and risk management. You will drive security architecture decisions, lead incident response, and support secure digital transformation across the UK properties.

The role requires coordinating PCI-DSS compliance, guiding stakeholders with risk-based advice, and promoting security awareness. You will partner with IT, HR, and business units to strengthen the group’s security