Senior Information

Cyber Security training courses; West of England, Southampton; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Hybrid and flexible working

Performance-linked bonus

Enhanced parental leave

Private healthcare

Wellbeing initiatives

Job summary

Cyber Security training courses is seeking a Senior Cyber and Information Security Manager to lead risk governance and strategy in a hybrid setup, based out of Bristol or Southampton. The role focuses on safeguarding information with an ISMS, leading a security team, and collaborating with senior stakeholders.

You will drive ISO 27001, NIST CSF and Cyber Essentials Plus while managing security operations and supplier relationships, with a strong emphasis on risk, compliance and a security-first

Qualifications

• Significant senior cyber/security experience in regulated environments.
• Proven ability to engage with senior stakeholders and lead teams.
• Strong knowledge of ISO 27001, NIST CSF and data protection concepts.

Responsibilities

• Define and deliver cyber and information security strategy and roadmap.
• Advise senior leaders on cyber risk, governance and compliance.
• Own and continuously improve the ISMS and security operations.

Skills

Senior cyber security experience

Regulated environment experience

Stakeholder engagement

Team leadership

Data protection (GDPR)

Education

CISM or CISSP

Tools

ISO 27001

NIST CSF

Cyber Essentials Plus

Job description

Senior Cyber and Information Security Manager

Permanent - £80k - £90k

Location: Hybrid - Either Bristol or Southampton

Your new company:

I am looking to recruit a Senior Cyber and Information Security Manager to join a national law firm. The business has a strong reputation, and you'll be joining a pre-existing team and set up. The company offers good benefits and hybrid working, ideally out of either their Bristol or Southampton office twice a week.

The role responsibilities:

• Define and deliver the cyber and information security strategy and roadmap.
• Act as a trusted advisor to senior leaders on cyber risk, governance and compliance.
• Own and continually enhance the Information Security Management System (ISMS).
• Lead the approach to ISO 27001, NIST CSF, Cyber Essentials Plus and wider security best practice.
• Oversee security operations, incident response and threat management activities.
• Manage key security suppliers, partners and managed service providers.
• Support client audits, due diligence requests and regulatory requirements.
• Drive security awareness and embed a security-first culture across the firm.
• Lead and develop a small team of Cyber and Information Security professionals.
• Work collaboratively with Technology, Risk, Compliance and business teams to strengthen our security posture.

You will need:

• Significant experience in a senior cyber or information security role.
• Experience within a regulated or professional services environment.
• Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks.
• Hands-on experience across risk management, incident response and security operations.
• Proven ability to engage, influence and build credibility with senior stakeholders.
• Experience leading, mentoring or developing security professionals.
• A strong understanding of GDPR and data protection principles.
• A proactive, pragmatic and solutions-focused approach.
• Either CISM or CISSP

What you'll get in return:

• Salary of between £80k-£90k
• Hybrid and flexible working
• Performance-linked bonus.
• Enhanced parental leave policies.
• Private healthcare and wellbeing initiatives.