Security Manager

JR United Kingdom; Worcester; Remote; GBP 60,000 - 90,000; Full time

Job summary

Une société de premier plan au Royaume-Uni recherche un Security Manager pour diriger la stratégie de sécurité d'un programme digital majeur du secteur public. Ce rôle clé consiste à intégrer la sécurité dans la transformation, en gérant les risques et en s'assurant de la conformité avec les cadres de gouvernance et de confidentialité. Les candidats doivent posséder une expertise prouvée dans l'ensemble du cycle de vie de la sécurité, avec une expérience dans le secteur public, idéalement avec le NHS.

Qualifications

• Connaissance approfondie des meilleures pratiques de sécurité NIST, ISO27001, ISO27701.
• Expérience prouvée dans la gestion complète de la sécurité et de la gouvernance.
• Expérience de travail dans le secteur public britannique, idéalement avec le NHS.

Responsibilities

• Agir en tant que responsable principal de la sécurité pour le programme de digitalisation.
• Produire et présenter des rapports de gouvernance de sécurité, des registres de risques.
• Diriger les évaluations de risques et gérer les contrôles de mitigation.

Skills

Risk Management

Governance

Incident Response

Agile

DevSecOps

Education

Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor

Tools

Jira

Confluence

Job description

Social network you want to login/join with:

Security Manager – Digital Transformation (Inside IR35)

We’re looking for a proactive and highly experienced Security Manager to lead the security strategy for a major UK Public Sector digital programme. If you’re passionate about embedding security by design, managing risks at scale, and ensuring alignment with governance and privacy frameworks, this role will put you at the heart of a high-impact transformation.

? Location: UK, Remote

? Contract Type: Inside IR35

Responsibilities

?️ Acting as the primary security lead for the Digitalisation programme and associated digital solutions

? Producing and presenting monthly security governance reports, risk registers, and security cases

️ Leading risk assessments, managing mitigation controls, and contributing to DPIAs

? Supporting HMG Secure-by-Design assurance across the entire delivery lifecycle

?️ Feeding into control design activities—DevSecOps, threat modelling, workshops, and design reviews

? Managing and coordinating penetration testing and remediation efforts

? Leading security incident response for the programme, from detection to resolution

? Running tailored security awareness training for teams

? Maintaining continuous oversight of emerging threats, vulnerabilities, and ensuring swift action

? Supporting alignment with future certification frameworks such as GovAssure, NCSC CAF, ISO27001

Requirements:

? In-depth knowledge of NIST, ISO27001, ISO27701, NCSC, and Cabinet Office security best practices

Proven track record across full security lifecycle: risk management, governance, incidents, pen testing

?️ Experience working in the UK Public Sector, ideally with the NHS/NHSE and government design principles

️ Hands-on experience in Agile/DevOps settings using tools like Jira and Confluence

Bonus Points ?

? Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor

? Familiarity with NHS-specific or healthcare-related data protection requirements

Deadline for applications is 30.05.2025 (17:00.)