IT Security Manager

Be-IT; City of Edinburgh; On-site; GBP 60,000 - 90,000; Full time

Job summary

Be-IT is seeking an experienced IT Security Manager in Edinburgh. This role offers the unique opportunity to lead a new function in a market-leading organization, with full ownership to define strategy, set policies, and steer security processes. The successful candidate will work closely with senior stakeholders to embed security across the business and champion a security-first culture. This is a chance to make a significant impact in shaping the organization's security landscape, driving cultural change, and fostering awareness around security.

Qualifications

• Proven experience in information security, cybersecurity, GRC, or a similar discipline.
• Strong understanding of modern security practices and governance.
• Ability to translate technical concepts into business language.

Responsibilities

• Lead the cultural shift towards a security-first mindset.
• Design and implement company-wide security policies and standards.
• Strengthen security controls and help shape secure-by-design practices.

Skills

Information security

Cybersecurity

Governance, Risk, and Compliance (GRC)

Stakeholder management

Security awareness and education

Job description

We’re looking for an experienced and forward-thinking IT Security Manager to take full ownership of a newly created role within a growing, market leading organisation

This is a rare opportunity to step into a role with true autonomy, where you will define strategy, set policy, influence senior stakeholders, and become the business’s internal cyber and information security expert.

With a collaborative internal tech team and strong external partners, you’ll be empowered to steer, shape, and evolve the entire security landscape.

If you’re excited by building something from the ground up, driving cultural change, and becoming the go‑to voice for security, we want to hear from you.

What Makes This Role Stand Out

Brand‑new role — you get to shape it, define it, and establish best practice

High autonomy — lead policy, governance and compliance independently

Strategic influence — work directly with senior leadership to embed security into every layer of the business

Business‑wide impact — champion security awareness across every team

What You’ll Be Doing

Champion & Educate

• Lead the cultural shift towards a security‑first mindset
• Build awareness programmes and deliver training across the business
• Act as the internal SME for all security and data protection matters

Define & Govern

• Design and implement company‑wide security policies and standards
• Own the information security roadmap, governance, and risk management
• Automate and enforce consistent, scalable security processes
• Work closely with senior stakeholders on compliance, data protection and risk
• Oversee security alignment with the organisation’s MSP and internal technical teams

Oversee & Improve

• Strengthen security controls and help shape secure‑by‑design practices
• Review and refine processes around identity, access, data handling, and system changes
• Provide clear, concise reporting on risks, posture, incidents, and improvements

What You’ll Bring

• Proven experience in information security, cybersecurity, GRC, or a similar discipline
• Strong understanding of modern security practices and governance
• Confidence working with senior stakeholders and external partners
• Ability to translate technical concepts into business language
• A proactive, hands‑on approach with the drive to build and grow a function
• Passion for education, awareness and influencing security culture
• Desirable: exposure to SOC services, vulnerability management, ISO/NIST/Cyber Essentials frameworks, Azure/M365 security stack, or experience developing policies and governance.

What’s In It for You

• The chance to build and lead a function from day one
• Complete autonomy to set direction and influence business‑wide decisions
• A supportive environment with strong external technical partners
• High visibility and the opportunity to make a real, lasting impact
• Flexibility and trust to deliver meaningful change

Ready to Take Ownership?

If you're an ambitious security professional who wants the freedom to shape strategy, define policy, and lead with impact, we’d love to hear from you.