IT Security & Risk Manager

Xpertise Recruitment; Birmingham; Hybrid; GBP 67,000 - 81,000; Full time

Job summary

Xpertise Recruitment is partnering with a Birmingham-based organisation to recruit an IT Security & Risk Manager. This hybrid role leads security governance, risk management, and cyber resilience initiatives within a small, specialized team.

You will shape security strategy, manage key incidents, and align security with business objectives while engaging senior stakeholders across the organisation.

Qualifications

• Proven experience in a senior IT Security, Cyber Security, or Information Security role.
• Experience in regulated environments and governance.
• Ability to communicate and influence stakeholders at all levels.

Responsibilities

• Lead the IT Risk and Security function and manage a small team.
• Develop and deliver the technical security roadmap.
• Oversee IT security policies, controls, and governance frameworks.
• Manage IT risk assessments, threat modelling, and mitigation activities.
• Own the IT risk register and ensure risks are monitored and managed.
• Lead responses to significant cyber security incidents.
• Oversee vulnerability management and remediation programmes.
• Advise senior stakeholders and leadership teams on security matters.

Skills

Risk management

Threat modelling

Security governance

Stakeholder management

Security policies

Education

CISSP/CISM certification

Tools

ISO 27001

Cyber Essentials

Job description

Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits

Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation's security strategy?

We're seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.

Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.

Why Join?

• Lead and shape the organisation's cyber security strategy
• Influence senior leadership and board-level stakeholders
• Own and deliver a technical security roadmap
• Manage and develop a dedicated security and risk team
• Hybrid working with just 2 days per week onsite
• Opportunity to make a lasting impact across a complex technology environment

Key Responsibilities

• Lead the IT Risk and Security function and manage a small team
• Develop and deliver the technical security roadmap
• Oversee IT security policies, controls, and governance frameworks
• Manage IT risk assessments, threat modelling, and mitigation activities
• Own the IT risk register and ensure risks are effectively monitored and managed
• Lead responses to significant cyber security incidents
• Oversee vulnerability management and remediation programmes
• Act as the organisation's security subject matter expert, advising senior stakeholders and leadership teams

Requirements

• Proven experience in a senior IT Security, Cyber Security, or Information Security position
• Strong knowledge of risk management and threat analysis methodologies
• Experience implementing and maintaining security frameworks including ISO 27001
• Knowledge of Cyber Essentials and wider security best practices
• Experience developing security policies, controls, and procedures
• Ability to communicate and influence stakeholders at all levels
• CISSP, CISM, or similar security certification (or working towards) preferred
• Experience within a regulated environment
• Cyber resilience and security operations expertise
• Experience managing security professionals
• Strong commercial awareness and stakeholder management skills

Salary:

Up to £74,000

We welcome applicants from all backgrounds. Our Client are an equal opportunities employer.

Right to work in the UK is required for this role.