InfoSec Manager: ISMS, GRC & Cloud Security

SSA Digital Recruitment; Bedford; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

SSA Digital Recruitment is seeking an experienced Cyber Security Manager to lead information security across networks, on-prem and cloud environments. You will partner with Infrastructure, IT Operations and Engineering to embed security by design, define controls, and drive security program maturity.

The role focuses on ISMS governance, risk management, and compliance with standards such as ISO 27001, while guiding vulnerability management, patching, IAM, and incident response in a hybrid

Qualifications

• Strong technical background in network security, infrastructure security and cyber security.
• Progressed from technical infrastructure or security engineering into Information Security, GRC or Security Assurance.
• Experience with ISO 27001, ISMS, security audits and information security frameworks.

Responsibilities

• Lead information security governance, risk management and compliance activities.
• Maintain and improve the ISMS and support ISO 27001 certification.
• Provide technical guidance on security architecture, vulnerability management and secure configuration.
• Oversee security audits, supplier assurance, and incident response planning.
• Collaborate with Infrastructure, IT Operations and Engineering to embed security across networks, servers, cloud environments and business systems.

Skills

Cyber Security

Information Security

Network Security

Infrastructure Security

Security Engineering

ISO 27001

ISMS

GRC

Vulnerability Management

Incident Response

Azure Security

Microsoft 365 Security

Active Directory

Job description

SSA Digital Recruitment is seeking an experienced Cyber Security Manager to lead information security across networks, on-prem and cloud environments. You will partner with Infrastructure, IT Operations and Engineering to embed security by design, define controls, and drive security program maturity.

The role focuses on ISMS governance, risk management, and compliance with standards such as ISO 27001, while guiding vulnerability management, patching, IAM, and incident response in a hybrid