IT Information Security Manager (Cyber, ISO27001)

TXP; Hereford; Hybrid; GBP 60,000 - 65,000; Full time

Job summary

A leading services client in Hereford seeks an IT Information Security Manager to protect its data and information systems from cyber threats. The role involves developing security policies, conducting risk assessments, and training staff on security awareness. Candidates should have solid experience in information security management, knowledge of ISO 27001, and relevant certifications such as CISSP or CISM. This position includes hybrid working options and offers a competitive salary package.

Benefits

Benefits package

Qualifications

• Solid experience in information security management ideally in ICT Infrastructure.
• Strong understanding of ISO 27001 and relevant security frameworks.
• Experience in developing and implementing information security policies.

Responsibilities

• Protect the Group's data and information systems from Cyber threats.
• Develop and implement security policies.
• Provide regular security reports to the CISO.

Skills

Information security management experience

Knowledge of ISO 27001

Technical understanding of IT and cloud

Risk assessment methodologies

Professional certifications in information security

Education

Certifications such as CISSP or CISM

Job description

Role: IT Information Security Manager

£60,000 - £65,000 Per Annum, Plus Benefits Package

Location: Hereford with hybrid working options available

Our leading services client requires an accomplished Information Security Manager on a full time basis to be responsible for protecting the Group's data and information systems from Cyber threats and unauthorised access.

This includes developing and implementing security policies, assessing risks, providing reports and managing security incidents. You will also oversee security awareness training, security compliance, security accreditation and collaborate with various stakeholders to foster a security‑conscious culture.

Key Deliverables:

• Align the business' security stance to comply with ISO 27001 and Cyber Essentials Plus, or in accordance with the Cyber Assessment Framework
• Improve the Cyber Awareness within the company via communications, Cyber Awareness training and monitoring of Staff compliance
• Enhance and maintain a high Microsoft 365 secure score by implementing Microsoft advisories
• Identify, assess, and mitigate security risks to the organisation's data and infrastructure
• Oversee the creation and document management of polices and standards
• Complete a full assessment of all third‑party applications
• Provide regular security reports to the CISO as required
• Advise the CISO, IT Team and the wider business on matters relating to cyber security

Skills & Experience:

• Solid experience working within a similar role within information security management, ideally within an ICT Infrastructure, Managed Service Provider and/or Systems Integrator
• In-depth knowledge of ISO 27001 standards and best practices, as well as other relevant security frameworks (eg, NIST, CAF)
• A regulated background is essential
• Strong technical understanding of modern IT and cloud environments, including the ability to assess third‑party platforms, suppliers, and software for security risks
• Proven experience in developing and implementing information security policies, procedures, and controls.
• Familiarity with risk assessment methodologies and tools
• Desirable: Experience of working within Defence, UK government and/or a commercial security supplier
• Professional certifications in information security, such as CISSP or CISM, ISO 27001 related

If your profile demonstrates strong and recent experience in the above areas - please submit your application ASAP to Jackie Dean at TXP for consideration.

TXP takes great pride in representing socially responsible clients who not only prioritise diversity and inclusion but also actively combat social inequality. Together, we have the power to make a profound impact on fostering a more equitable and inclusive society. By working with us, you become part of a movement dedicated to promoting a diverse and inclusive workforce.