IT Security Design Manager

Lorien; Leeds; Hybrid; GBP 111,000 - 148,000; Full time

Job summary

Lorien in Leeds is seeking an IT Security Design Manager to join a hybrid team (3–4 days onsite per week). The role focuses on embedding security by design across IT and business projects from the outset, balancing strong technical and advisory expertise.

You will lead security design activities, conduct risk assessments, collaborate with IT, business and architecture teams, and contribute to refining the IT Security Framework. This is a 3-month contract with potential extension.

Qualifications

• Industry-recognised security qualifications (CISSP or CISM) required.
• Strong design and architecture experience in secure systems.
• Experience conducting security risk assessments and providing design guidance.
• Knowledge across networks, applications, cloud, mobile, and web platforms.
• Familiarity with agile methodologies and modern development practices.
• Experience with AI, ML, and cloud-native platforms a plus.

Responsibilities

• Act as a key point of contact for project teams, ensuring new initiatives undergo appropriate security assessment and receive pragmatic, risk-based design advice.
• Conduct and oversee security risk assessments for projects, defining control requirements and ensuring compliance with organisational standards.
• Provide technical expertise in solution design and architecture, embedding security principles into technical decisions.
• Work closely with IT, business, and architecture teams to integrate security by design into solutions.
• Support the refinement of the IT Security Framework to deliver consistent and effective security practices.
• Identify, influence, and elevate significant security risks or issues to senior security leadership for timely resolution.

Skills

CISSP

CISM

Security architecture

Solution design

Risk assessments

Agile methodologies

Cloud security

AI security

Communication skills

Analytical skills

Stakeholder management

Security leadership

Job description

Job Title: Security Design Manager
Location: Leeds
Work Model: Hybrid- 3/4 days onsite in a week.
Duration: 3 months with possible extension.

Job Purpose

The IT Security Design Manager will work within a team of security designers to embed security requirements into IT and business projects from the outset. This role combines strong technical and advisory expertise in solution design and architecture, ensuring security by design principles are consistently applied across all initiatives.

Responsibilities

• Security by Design: Act as a key point of contact for project teams, ensuring new initiatives undergo appropriate security assessment and receive pragmatic, risk-based design advice.
• Risk Assessment: Conduct and oversee security risk assessments for projects, defining control requirements and ensuring compliance with organisational standards.
• Technical Leadership: Provide technical expertise in solution design and architecture, embedding security principles into technical decisions.
• Collaboration: Work closely with IT, business, and architecture teams to integrate security by design into solutions.
• Framework Contribution: Support the refinement of the IT Security Framework to deliver consistent and effective security practices.
• Escalation: Identify, influence, and elevate significant security risks or issues to senior security leadership for timely resolution, ensuring that critical threats are addressed effectively and do not hinder project objectives.

Personal Profile

Mandatory:

• Industry-recognised qualifications such as CISSP, CISM, or equivalent.
• Strong technical expertise in solution design and architecture with significant and proven experience in secure systems design.
• Experience conducting security risk assessments and providing design guidance.
• Broad understanding of information security processes and technologies across networks, applications, cloud, mobile, and web platforms.
• Familiarity with agile methodologies and modern development practices.
• Knowledge of securing emerging technologies such as AI, Machine Learning, and cloud-native platforms.
• Excellent communication skills; able to explain technical concepts clearly to non-technical stakeholders.
• Strong analytical, organisational, and problem-solving capabilities.
• Commercial experience in IT Security roles (consultant or management level).

• A demonstrated ability to research and acquire new knowledge and skills quickly

Desirable:

• Experience with frameworks and standards such as CIS Controls, ISO 27001, NIST CSF, PCI DSS, and GDPR.
• Hands-on experience with enterprise security architecture and solution design.
• Skilled in presenting complex information to stakeholder groups and large cross-functional teams, ensuring clarity and engagement across diverse audiences.
• Previous management experience.