Information Technology Security Manager

Confidential Jobs; United Kingdom; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Confidential Jobs is seeking an experienced Manager, IT Security (International) to strengthen and advance a global cybersecurity program across a multi-country enterprise. This hands-on role manages security operations, incident response, vulnerability management, and security architecture while coordinating with IT Operations, Infrastructure, Applications, and stakeholders.

The role requires expert analysis, incident handling, and the ability to partner across borders to mitigate risk, improve

Qualifications

• Associate degree with 4+ years of Information Security experience or Bachelor’s with 2+ years experience.
• 6+ years of relevant experience in a technical cybersecurity or information security role.
• Equivalent certifications and experience will be considered.

Responsibilities

• Deploy, tune, and monitor security technologies (SIEM, IDS/IPS, MDR/XDR, CSPM, email security, firewalls, network security).
• Lead investigations into security events and improve detection while minimizing false positives/negatives.
• Conduct forensic analysis of network traffic, memory/disk acquisitions, malware, logs, and OS activities.
• Investigate incidents with documentation, evidence preservation, remediation, and follow-up.
• Support vulnerability assessments, penetration testing, and audits; remediate findings.
• Develop security standards, procedures, and technical documentation; participate in risk management.

Skills

SIEM administration

Incident response

Vulnerability management

Security architecture

Windows administration

Linux administration

Networking fundamentals

M365 security

Data privacy

Forensics

Education

Associate degree

Bachelor's degree

Tools

Nessus

Qualys

Rapid7

Job description

Location: Homebased (With an expectation of weekly travel to one of our UK Sites). (London, Cambridgeshire, West Yorkshire, Lincolnshire, Manchester)

We are seeking an experienced Manager, IT Security (International) to help strengthen and advance our global cybersecurity program across a complex, multi-country enterprise.

This is a hands-on individual contributor role with accountability for regional IT security outcomes and coordination of security contractors. The successful candidate will serve as a trusted cybersecurity subject matter expert, partnering closely with IT Operations, Infrastructure, Applications, and other stakeholders to identify and mitigate risk, respond to security incidents, and continuously improve the organization's security posture.

The role combines security operations, incident response, vulnerability management, security architecture, investigations, compliance, and emerging technology considerations—including the secure use of AI and data privacy.

Key Responsibilities

• Deploy, configure, tune, and monitor security technologies including SIEM, IDS/IPS, MDR/XDR, CSPM, email security, firewalls, network security infrastructure, and other security platforms.
• Participate as a member of a global cybersecurity team supporting a multi-organization, multi-country environment.
• Lead investigations into security events, determine root cause, evaluate alerts and anomalous activity, and improve detection capabilities while minimizing false positives and negatives.
• Conduct forensic analysis of network traffic, memory and disk acquisitions, malware, security logs, operating systems, and other digital evidence.
• Investigate cybersecurity incidents and breaches and ensure appropriate documentation, evidence preservation, remediation, and follow-up.
• Monitor the evolving threat landscape and provide guidance on cybersecurity technologies, capabilities, and security architecture.
• Participate in security architecture reviews for new projects and ensure proposed solutions align with established security and risk requirements.
• Support vulnerability assessments, penetration testing, security audits, and remediation initiatives.
• Partner with IT Infrastructure, IT Operations, and IT Applications teams to identify and remediate vulnerabilities and strengthen overall security controls.
• Develop and maintain security standards, procedures, technical documentation, and best practices.
• Contribute to the development and maintenance of IT security policies and organizational standards.
• Support vendor due diligence and third-party risk management activities for IT vendors and contractors.
• Support internal and external audits and compliance activities related to requirements such as SOX, GDPR, and CCPA.
• Participate in disaster recovery and business continuity planning and testing.
• Support cybersecurity awareness initiatives, including security training and phishing simulations.
• Help evaluate and implement appropriate security practices for AI systems, tools, and emerging technologies.
• Collaborate with technical and business stakeholders to communicate cybersecurity risks and recommended actions in a clear and effective manner.

What We're Looking For

Required Qualifications

• Associate degree with 4+ years of Information Security experience; or
• Bachelor's degree with 2+ years of Information Security experience; or
• 6+ years of relevant experience in a technical cybersecurity or information security role.

Preferred Certifications

Relevant professional certifications are highly valued, including:

• GIAC: GCIH, GCED, GSEC or similar
• EC-Council: CEH, CPENT, CHFI, CND, ECIH and related certifications
• CompTIA: Security+, CASP+
• Microsoft: Azure Security Engineer Associate, Cloud and AI Security Engineer Associate, Azure AI Fundamentals

Equivalent experience and certifications will be considered.

Technical Expertise

The ideal candidate will bring demonstrated experience in several of the following areas:

• SIEM administration, alert management, detection tuning, and security monitoring
• Security incident response, including playbooks, tabletop exercises, third-party IR providers, containment, recovery, and root-cause analysis
• Analysis of logs from firewalls, routers, proxies, endpoint security products, operating systems, and other security technologies
• Vulnerability management and remediation using platforms such as Nessus, Qualys, or Rapid7
• Incident management, network monitoring, and information security policies and procedures
• Data management and Data Loss Prevention (DLP) technologies
• Data privacy requirements, including GDPR, CCPA, HIPAA, or comparable regulations
• Security frameworks and standards such as NIST Cybersecurity Framework, ISO 27001, CIS, COBIT, and PCI
• Security architecture, network security, and intrusion detection/prevention
• Computer forensics, digital evidence handling, data recovery, and eDiscovery
• Windows and Linux operating systems and command-line tools
• TCP/IP, networking fundamentals, and common network protocols
• Microsoft 365 environments, including SSO and MFA
• Security awareness, training, and phishing simulation programs
• Secure use and governance of AI technologies and tools

Professional Skills

Success in this role requires:

• Strong analytical, investigative, and problem-solving skills
• The ability to remain effective in high-pressure and rapid-response situations
• Excellent written and verbal communication skills, with the ability to communicate effectively with technical and non-technical audiences
• Strong relationship-building and stakeholder management skills
• The ability to influence, educate, and collaborate across organizational boundaries
• Strong organization, prioritization, and project management capabilitiesThe ability to work independently with limited supervision while contributing effectively to a global team
• A continuous-learning mindset and genuine interest in emerging cybersecurity threats, technologies, and techniques
• Demonstrated ability to drive security initiatives from planning through completion

This position operates in a global environment and requires collaboration across countries, time zones, and functional teams.

The role may require:

• Occasional overtime or adjusted working hours
• Occasional international travel
• Participation in an on-call rotation, including nights, weekends, and holidays

Why This Role Matters

This is an opportunity to play a key role in protecting a global organization from evolving cybersecurity threats. You will have the opportunity to work across a broad range of security technologies and disciplines while partnering with teams throughout the enterprise to improve resilience, reduce risk, and build a stronger security culture.