Security Lead

Sanderson Recruitment Careers; England; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

A leading recruitment agency in the United Kingdom is seeking a Security Lead to strategically manage both internal and client-facing security initiatives. The ideal candidate will own security governance, lead compliance efforts with frameworks such as Cyber Essentials and ISO27001, and translate technical risks into business impacts. This role offers a hybrid working environment with a competitive salary up to £65,000.

Qualifications

• Experience with security governance and compliance frameworks.
• Strong knowledge of risk management practices.
• Proven ability as a trusted advisor.

Responsibilities

• Oversee security governance and compliance.
• Lead client Quarterly Security Reviews.
• Translate technical risks into business recommendations.

Skills

Security governance

Risk management

Compliance with Cyber Essentials

Knowledge of ISO27001

Understanding of NIST frameworks

Job description

Security Lead

Oxfordshire / Hybrid / Permanent / up to £65,000

About the Role

We're seeking a Security Lead to take ownership of both client-facing and internal security strategy within our Managed Services environment. This is a strategic and hands‑on leadership position - you'll oversee security governance, ensure compliance with leading frameworks (Cyber Essentials, ISO27001, NIST), and maintain a strong internal security posture across our systems and services.

You'll lead Quarterly Security Reviews (QSRs), manage client risk registers, and act as a trusted advisor translating complex risks into clear business outcomes. Internally, you'll own our security frameworks, guide improvement across tools and teams, and ensure compliance through measurable posture metrics and ongoing development.

Key Responsibilities

Lead client Quarterly Security Reviews (QSRs) covering vulnerabilities, incidents, compliance, and risk registers.

Translate technical risks into meaningful business impacts and recommendations.

Manage internal and client risk registers and excep...