Naimuri - Information Security Officer

QinetiQ Limited; Manchester; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Flexible/Hybrid working options

Performance bonus

Company bonus

Pension matched 1.5x up to 10.5%

25 days annual leave

AXA group medical cover

Cycle to work scheme

Job summary

Naimuri in Manchester is seeking an Information Security Officer to bridge policy and practice. You’ll lead governance, risk & compliance, work on cloud security (AWS/Azure) and incident response, and help evolve security policies with the Head of Security.

You’ll thrive in a fast-paced tech environment, communicate risk to non-technical stakeholders, manage licenses and access, and support a flexible hybrid setup with roughly three days in the office.

Qualifications

• 2–4 years in information security or dual IT/security role.
• Familiarity with cloud platform security (AWS/Azure/GCP) and corporate device management.
• Understanding of UK GDPR and ISO27001 principles.
• Certifications such as CompTIA Security+, SSCP or CISM are a plus.

Responsibilities

• Governance, risk and compliance: manage security frameworks and policy evolution.
• Security auditing and third‑party risk assessment of supply chain and vendors.
• Technical security and operations: harden cloud environments and devices.
• Incident response: investigate alerts and refine playbooks; manage licenses and access.

Skills

Cloud security

MDM solutions

GDPR knowledge

Security certifications

Tools

MDM solutions

Job description

Select how often (in days) to receive an alert:

Job Title: Naimuri - Information Security Officer

Location: Manchester, England, United Kingdom

Role Type:

Job Title: Naimuri - Information Security Officer

Job ID: 20594

The Mission:

At Naimuri, we provide the tech that protects. As our Information Security Officer, you will sit at the heart of our mission, bridging the gap between high-level compliance and hands-on technical security. You won’t just be writing policies; you’ll be ensuring they work in the real world. Reporting directly to the Head of Security, you will play a pivotal role in maintaining our reputation as a trusted partner to our customers.

The Balance: What You’ll Be Doing:

1. Governance, Risk & Compliance (The "Handoff")

• Framework Management: Manage and evolve our security management systems, ensuring we remain aligned with security frameworks & standards, e.g. Cyber Essentials Plus & ISO27001.
• Policy Evolution: Work with the Head of Security to develop and implement security policies that balance the need for security with the agility needed for a modern tech company.
• Security Auditing: Conduct internal audits and coordinate with external assessors to ensure our security posture is ironclad.
• Third-Party Risk: Assess the security of our supply chain and software vendors.

2. Technical Security & Operations (The "Hands-on")

• Collaborative Defence: Work alongside the internal teams to harden our cloud environments (AWS/Azure) and ensure end-user devices (laptops, mobile) are configured securely.
• Vulnerability Management: Run and remediate vulnerability scans; don’t just report the issues; help figure out how to fix them.
• Incident Response: Be a key part of our incident response team, investigating alerts and refining our "playbooks" for future threats.
• Identity & Access: Manage the lifecycle of software licenses and access controls, ensuring the principle of least privilege is always met.

Who You Are:

• The Bridge: You can talk "tech" within a very technical company but also explain "risk" to a non-technical stakeholder.
• Growth Mindset: You are at a mid-level stage in your career and are hungry to step up. You want a seat at the table where decisions are made.
• Agile & Dynamic: You thrive in fast-paced environments. You’d rather solve a problem than wait for a ticket to be assigned.
• Security First: You have a natural "security mindset" you see the vulnerability in the process before it becomes a problem.

Your Toolkit (Requirements):

• Experience: 2-4 years in an Information Security or dual IT/Security role, ideally within a regulated industry or government-adjacent sector.
• Technical Knowledge: Familiarity with cloud platform security (AWS, Azure, or GCP) and MDM solutions for managing corporate devices.
• Regulatory Knowledge: Understanding of UK Data Protection/GDPR and ISO 27001.
• Certification: While not mandatory, certifications such as CompTIA Security+, SSCP, or CISM are a significant plus.

Why Naimuri?

• People First: Expect a supportive environment that values your mental health and professional development.
• High Impact: Your work directly supports the safety and security of the UK.
• Culture:A vibrant Salford-based team with a "work hard, support each other" ethos.

Pay and benefits:

Naimuri pays competitively within the industry based on your role's base location rates. The salary for this position is dependent upon your experience. We assess seniority relative to the team at Naimuri during the interviewing process.

A full time working week is 37.5 hours and you have flexibility over when you give that time. We also offer part-time working, which can be discussed during the recruitment process.

We offer hybrid working where you can work from home for part of your working week with time on site being based on the needs of your assigned delivery and agreed Ways of Working for your team. We would expect that the successful candidate would be working an average of 3 days a week in the office. Depending on the project, you may also be required to travel to a local customer site or occasionally to other locations in the UK.

Benefits include:

• Flexible/Hybrid working options
• Performance bonus
• Company bonus
• Pension matched 1.5x up to 10.5%
• 25 days annual leave plus bank holidays.
• AXA group 1 medical cover
• Cycle to work scheme

Recruitment Process:

We are committed to building an inclusive, safe and supportive environment that allows everyone to do their best work, so we strongly encourage candidates of all different backgrounds and identities to apply. We can of course support any accessibility or neurodiversity requirements that you may need during the recruitment process.

We want to ensure that you feel comfortable and confident when interviewing with us. To help you prepare, our team will be happy to discuss the process in more detail with you when you apply.