InfoSec Manager: Product Security & Risk (12m, Hybrid)

Reed Technology; Cambridge; Hybrid; GBP 85,000 - 100,000; Full time

Job summary

Reed Technology is seeking an experienced Information & Cybersecurity Manager to lead information security, product security and cyber risk management across a regulated technology environment.

This role combines strategic thinking with hands-on delivery, working with Software Development, Regulatory, Clinical, IT and Operations teams. Hybrid working in Cambridge is expected, with a strong focus on mature ISMS and security governance.

Qualifications

• 5+ years' experience in Information Security, Cybersecurity or Product Security.
• Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP.
• Experience conducting risk assessments, threat modelling and vulnerability management.
• Experience integrating security into software development lifecycles.
• Strong cloud security knowledge, ideally AWS.
• Experience supporting audits, regulatory reviews or compliance activities.
• Excellent stakeholder management and communication skills.
• Ability to work independently and deliver pragmatic, risk-based solutions.

Responsibilities

• Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls.
• Lead cybersecurity risk assessments, threat modelling and security reviews.
• Oversee penetration testing, vulnerability management and remediation activities.
• Advise on secure design, cloud security, mobile security, authentication, encryption and access control.
• Embed cybersecurity requirements within software and product development processes.
• Support regulatory submissions, audits, inspections and customer security assessments.
• Monitor emerging threats affecting applications, cloud services and connected technologies.
• Manage incident response, business continuity and cyber resilience activities.
• Review third‑party suppliers and technology partners from a security perspective.
• Provide security awareness training and guidance across the organisation.
• Present security risks and recommendations to senior leadership.

Skills

Information security

Cybersecurity

Product security

ISO 27001

NIST

OWASP

Cloud security

Stakeholder management

Tools

AWS

Job description

Reed Technology is seeking an experienced Information & Cybersecurity Manager to lead information security, product security and cyber risk management across a regulated technology environment.

This role combines strategic thinking with hands-on delivery, working with Software Development, Regulatory, Clinical, IT and Operations teams. Hybrid working in Cambridge is expected, with a strong focus on mature ISMS and security governance.