IT Security & Risk Manager

Xpertise Recruitment; Birmingham; Hybrid; GBP 67,000 - 81,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Xpertise Recruitment in Birmingham is seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives. The role offers hybrid work with 2 days onsite and exposure to senior stakeholders while guiding a small security team.

The ideal candidate will have senior IT security experience, strong risk analysis skills, and familiarity with ISO 27001 and Cyber Essentials, with CISSP/CISM preferred.

Qualifications

• Senior IT Security, cyber security or information security experience.
• Knowledge of risk management methodologies and threat analysis.
• Experience implementing and maintaining ISO 27001.
• Knowledge of Cyber Essentials and security best practices.
• Experience developing security policies, controls and procedures.
• Ability to communicate and influence stakeholders at all levels.
• CISSP, CISM or similar certification preferred.

Responsibilities

• Lead the IT Risk and Security function and manage a small team.
• Develop and deliver the technical security roadmap.
• Oversee IT security policies, controls and governance frameworks.
• Manage IT risk assessments, threat modelling and mitigation activities.
• Own the IT risk register and ensure risks are monitored and managed.
• Lead responses to significant cyber security incidents.
• Oversee vulnerability management and remediation programmes.
• Advise senior stakeholders and leadership teams as security SME.

Skills

IT Security

Risk Management

Security Governance

ISO 27001

Cyber Essentials

Stakeholder Communication

Security Certifications

Education

CISSP/CISM certification

Job description

IT Security & Risk Manager

Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits

Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation's security strategy?

We're seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.

Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.

Why Join?

• Lead and shape the organisation's cyber security strategy
• Influence senior leadership and board-level stakeholders
• Own and deliver a technical security roadmap
• Manage and develop a dedicated security and risk team
• Hybrid working with just 2 days per week onsite
• Opportunity to make a lasting impact across a complex technology environment

Key Responsibilities

• Lead the IT Risk and Security function and manage a small team
• Develop and deliver the technical security roadmap
• Oversee IT security policies, controls, and governance frameworks
• Manage IT risk assessments, threat modelling, and mitigation activities
• Own the IT risk register and ensure risks are effectively monitored and managed
• Lead responses to significant cyber security incidents
• Oversee vulnerability management and remediation programmes
• Act as the organisation's security subject matter expert, advising senior stakeholders and leadership teams

Requirements

• Proven experience in a senior IT Security, Cyber Security, or Information Security position
• Strong knowledge of risk management and threat analysis methodologies
• Experience implementing and maintaining security frameworks including ISO 27001
• Knowledge of Cyber Essentials and wider security best practices
• Experience developing security policies, controls, and procedures
• Ability to communicate and influence stakeholders at all levels
• CISSP, CISM, or similar security certification (or working towards) preferred

Desirable Experience

• Experience within a regulated environment
• Cyber resilience and security operations expertise
• Experience managing security professionals
• Strong commercial awareness and stakeholder management skills

Salary: Up to £74,000

Working Pattern: Hybrid, 2 days per week onsite

We welcome applicants from all backgrounds. Our Client are an equal opportunities employer.

Xpertise is acting as an employment agency & business.

At Xpertise, we keep things human, your application will always be reviewed by a real person. We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.

Right to work in the UK is required for this role.