Information Technology Security Manager

Accelero; Cardiff; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Accelero seeks a senior Information Security leader to guide a three-analyst team and partner with the Data Protection Officer. The role focuses on strategic transformation, governance, and aligning security with business needs.

You will oversee SOC initiatives, third-party risk, and security operations, shaping the organisation's security posture while influencing senior stakeholders and driving change.

Qualifications

• Demonstrable experience in cyber security operations, SOC management, or security operations leadership.
• Working understanding of the Microsoft security stack (Purview, Sentinel, Intune).
• Strong stakeholder management and influencing skills for senior leadership and technical teams.
• Experience with CrowdStrike and/or ISO 27001 is desirable but not essential.
• Role is not gated on specific tools; emphasis on strategic leadership and change management.

Responsibilities

• Lead the assessment and onboarding of a third-party SOC in early business case stage.
• Roll out a flat, 'coffee shop' style network access model balancing security and business needs.
• Provide ongoing oversight of SOC operations and performance.
• Lead third-party risk assessments on an ongoing basis.
• Manage, develop, and support a team of three Security Analysts.
• Collaborate with the Data Protection Officer on data protection and governance matters.
• Represent information security with senior stakeholders to build buy-in for initiatives.

Skills

Cyber security operations

SOC management

Security leadership

Tools

Microsoft Purview

Microsoft Sentinel

Microsoft Intune

Job description

Hybrid Working (minimum 1 day per week on-site)

About the Role

Reporting to the Chief Technology Officer, the successful candidate will lead a team of three Security Analysts and work in close partnership with the Data Protection Officer to ensure the organisation's information security posture supports both operational needs and regulatory compliance.

This is a senior, strategic role rather than a hands-on technical position. The organisation is looking for a leader who can drive transformation, influence stakeholders at all levels, and balance competing business priorities.

Key Responsibilities

• Lead the assessment and onboarding of a third-party Security Operations Centre (SOC), currently in the early stages of business case development
• Lead the rollout of a flat, "coffee shop" style network access model, balancing business flexibility with the operational needs of the security and data protection functions
• Provide ongoing oversight of SOC operations and performance
• Lead third-party risk assessments on an ongoing basis
• Manage, develop, and support a team of three Security Analysts
• Act as a key point of collaboration with the Data Protection Officer on data protection and information governance matters
• Represent information security at a senior stakeholder level, building buy-in for security initiatives across the organisation

Candidate Requirements

• Demonstrable experience in cyber security operations, SOC management, or security operations leadership (this role is weighted approximately 80% cyber operations, 20% Information Security)
• Working understanding of the Microsoft security stack (Purview, Sentinel, Intune)
• Strong stakeholder management and influencing skills, with the ability to engage senior leadership and technical teams alike
• Experience with CrowdStrike and/or ISO 27001 is desirable but not essential
• This role is not gated on specific tools or technologies; emphasis is placed on strategic leadership, judgement, and the ability to drive change