IT Security & Governance Manager

Ontic; England; On-site; GBP 60,000 - 80,000; Full time

Job summary

A company in aerospace and defence is seeking an IT Security and Governance Manager to ensure security, compliance, and governance of global information systems. The role includes managing IT security certifications and developing ISMS. Ideal candidates will possess significant experience in security management and strong communication skills. This position is located at the Staverton site, with some travel expected.

Benefits

Up to 29 days annual leave plus Bank Holidays

10 hours paid volunteering time

Annual goal share bonus scheme

24/7 Employee Assistance Programme (EAP)

Discounts from a range of retailers

Qualifications

• Significant experience in achieving and managing IT security certifications.
• Experience in a manufacturing or similar complex environment.
• Comfortable engaging with stakeholders at all levels.

Responsibilities

• Coordinate IT security compliance for ISO 27001, CMMC, and Cyber Essentials.
• Build and manage Information Security Management System (ISMS).
• Lead supplier engagements ensuring security standards compliance.

Skills

Experience in IT security certifications management

Understanding of risk management methodologies

Policy development

Excellent organisational skills

Strong communication skills

Project management

Education

Qualifications in data protection or IT security certification management

Job description

IT Security and Governance Manager

Ontic, a leading licensor and manufacturer of complex engineering parts for the global aerospace and defence industries, are now recruiting for an IT Security and Governance Manager to join our IT team, where you'll play a key role in ensuring the security, compliance, and governance of our global information systems. This role will be based at our Staverton site, with some domestic and international travel expected.

Ontic is more than just a business - we're a community of innovators who pride ourselves on fostering a culture where talent thrives, ideas flourish, and careers are built. We're committed to excellence, driving us to continuously improve and adapt, ensuring that we remain at the forefront of our industry.

The Role

As IT Security and Governance Manager, you'll coordinate all aspects of Ontic's IT security compliance, ensuring that the business achieves and maintains key certifications including ISO 27001, CMMC (NIST 800-171), Cyber Essentials Plus, and EASA. You'll take the lead in building and managing our Information Security Management System (ISMS), ensuring that our policies, processes, and controls meet the highest standards of data protection and cyber resilience.

Working closely with the Sr. Director of Cybersecurity and Infrastructure, you'll develop, implement, and oversee policies designed to strengthen Ontic's security posture. You'll manage supplier engagements, ensuring compliance with security standards, and provide clear and engaging communication to internal and external stakeholders.

Your work will extend across governance activities such as regular system audits, risk management reporting, and awareness initiatives to help embed a culture of security throughout the organisation. This role is both strategic and hands‑on, ensuring that Ontic remains compliant, vigilant, and prepared in an evolving cyber landscape.

About You

At Ontic, our culture is integral to making sure we enjoy our work and deliver for our customers. While we look for the right skillset, we're also looking for someone who will thrive within our recognition and empowerment culture.

You'll bring significant experience in achieving and managing IT security certifications, ideally within a manufacturing or similarly complex environment. You'll have a strong understanding of risk management methodologies, policy development, and the structure of an effective ISMS.

With excellent organisational and communication skills, you'll be comfortable engaging with stakeholders at all levels and managing complex, cross-functional projects. Experience with standards such as ISO 27001, NIST, and Cyber Essentials is essential, and qualifications in data protection or IT security certification management would be advantageous.

Benefits

At Ontic, we care about your financial, physical, and mental wellbeing. We offer a range of benefits designed to support what matters most to you - with a valued culture of recognition, empowerment, and flexibility that supports a healthy work/life balance.

Our benefits include:

• Up to 29 days annual leave plus Bank Holidays
• 10 hours paid volunteering time
• Annual goal share bonus scheme for all employees
• 24/7 Employee Assistance Programme (EAP)
• Discounts and offers from a range of retailers

Our Values

Our values are intrinsic to everything we do:

• We share a common sense - we're a global family of specialists with a shared passion for precision.
• We have the freedom to choose - we're challengers and innovators with the freedom to think differently and challenge the status quo.
• We create the opportunity - we're change-makers with a clear direction and can‑do spirit.

We are a fast‑paced business with ambitious growth plans; so if you are dedicated, enthusiastic and always seeking ways to improve, you'll enjoy a career with us!