Security Manager

ISR RECRUITMENT LIMITED; Leeds; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Excellent company benefits and Incenti

Job summary

ISR RECRUITMENT LIMITED is seeking an experienced Security Manager to lead governance, risk and compliance across UK and European operations. The role focuses on PCI DSS, ISO 27001 and Cyber Essentials Plus, with responsibility for audits, risk registers and incident response.

The successful candidate will coordinate vulnerability management, support business continuity, and engage with external auditors and stakeholders to raise security standards across the organisation.

Qualifications

• Minimum 3 years in a Security Manager, Information Security Manager, GRC Manager or similar role.
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance.
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance.
• Experience with Cyber Essentials Plus.
• Experience maintaining and managing security risk registers.
• Experience coordinating vulnerability scanning, penetration testing and remediation.
• Information security incident management/investigation experience.
• Experience with Microsoft 365, Azure and AWS environments.
• Strong stakeholder management and communication skills.
• Experience working with external auditors and third-party security assessments.
• Security certifications such as CISSP, CISA or ISO 27001 Lead Auditor/Implementer would be advantageous.

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus.
• Conducting security risk assessments, internal audits and control reviews.
• Maintaining and monitoring the organisational security risk register.
• Coordinating vulnerability scanning, penetration testing and remediation.
• Supporting information security incident investigation and resolution.
• Supporting business continuity and resilience planning.
• Coordinating third-party security audits across European operations.
• Working with technical and non-technical stakeholders across the UK and internationally to continuously improve security practices.

Skills

PCI DSS

ISO 27001

Cyber Essentials Plus

Risk management

Vulnerability management

Audits & remediations

Stakeholder management

Incident response

Cloud platforms (AWS/Azure)

Microsoft 365

Tools

AWS

Azure

Microsoft 365

Office 365

Job description

Salary: £60,000 - 70,000 per year

Requirements

• Minimum 3 years experience in a Security Manager, Information Security Manager, GRC Manager or similar role
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance
• Experience with Cyber Essentials Plus
• Experience maintaining and managing security risk registers
• Experience coordinating vulnerability scanning, penetration testing and remediation
• Information security incident management/investigation experience
• Experience with Microsoft 365, Azure and AWS environments
• Strong stakeholder management and communication skills
• Experience working with external auditors and third-party security assessments
• Security certifications such as CISSP, CISA or ISO 27001 Lead Auditor/Implementer would be advantageous

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus
• Conducting security risk assessments, internal audits and control reviews
• Maintaining and monitoring the organisational security risk register
• Coordinating vulnerability scanning, penetration testing and remediation
• Supporting information security incident investigation and resolution
• Supporting business continuity and resilience planning
• Coordinating third-party security audits across European operations
• Working with technical and non-technical stakeholders across the UK and internationally to continuously improve security practices

Technologies

• AWS
• Azure
• Incident Management
• Microsoft 365
• Security
• Office 365
• Cloud

More

We are recruiting for an experienced Security Manager to join an established international technology organisation operating within the intelligent mobility, road technology and payments sector. This is a broad information security position combining cyber security, governance, risk, compliance and operational resilience, and you will work across UK and European operations to help maintain key security accreditations while ensuring vulnerabilities, risks and security requirements are effectively managed across the business. The environment includes high-volume, payment-focused technology, making PCI DSS, information security and business resilience particularly important. The role is based in Leeds with 2–3 days per week in the office, and we offer a salary of £60,000 to £70,000 per year plus excellent company benefits and incentives. This is a newly created role that provides a clear career path and an opportunity to join a genuine industry leader transforming the transport technology space through innovation and technology.