Senior Security Manager

Peaple Talent Ltd; West of England; Híbrido; GBP 72.000 - 98.000; Jornada completa

Descripción de la vacante

Peaple Talent is partnering with a forward-thinking professional services organisation to appoint a Senior Cyber & Information Security Manager to lead and shape the security function in Bristol.

You will own the strategy, protect people, systems and client data, and work with senior stakeholders while leading security operations, incident response, risk management and supplier governance. This is a hybrid Bristol role.

Formación

• Significant experience in a senior Cyber or Information Security leadership role.
• Strong experience in regulated or professional services environments.
• Proven track record developing and delivering cyber security strategies and roadmaps.
• Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and governance frameworks.
• Hands-on experience across security operations, risk management, incident response and threat management.
• Experience owning and improving an Information Security Management System (ISMS).
• Strong stakeholder management with ability to influence senior leadership.
• Experience mentoring or developing security professionals.
• Good understanding of GDPR and data protection principles.
• Experience managing security suppliers, partners and managed service providers.

Responsabilidades

• Lead and shape the security function and cyber risk governance.
• Own and drive the organisation's cyber and information security strategy.
• Oversee security operations, incident response and threat management.
• Manage ISMS lifecycle and drive continuous improvement.
• Collaborate with senior leadership, Technology, Risk and Compliance teams.
• Oversee suppliers, partners and third-party security assessments.

Conocimientos

Security leadership

Security governance

Threat management

Incident response

ISMS ownership

Regulatory compliance

Data protection (GDPR)

Vendor & third-party risk

Stakeholder management

Mentoring security professionals

Security strategy development

ISO 27001 / NIST CSF knowledge

Descripción del empleo

Senior Cyber & Information Security Manager | Bristol (Hybrid) | £85,000

Peaple Talent is partnering with a forward-thinking professional services organisation as they look to appoint a Senior Cyber & Information Security Manager to lead and shape their security function.

This is a role where you'll take ownership of the organisation's cyber and information security strategy, helping protect its people, systems and client data while ensuring the business remains ahead of evolving threats, regulatory requirements and client expectations.

You'll work closely with senior leadership, Technology, Risk, Compliance and wider business teams, acting as a trusted advisor on cyber risk, governance and security. Alongside the strategic responsibility, you'll lead a small security team and oversee security operations, incident response, suppliers and key security programmes.

What You'll Bring:

• Significant experience in a senior Cyber or Information Security leadership role
• Strong experience working within a regulated or professional services environment
• Proven experience developing and delivering cyber and information security strategies and roadmaps
• Strong knowledge of ISO 27001, NIST CSF, Cyber Essentials Plus and security governance frameworks
• Hands-on experience across security operations, risk management, incident response and threat management
• Experience owning and continually improving an Information Security Management System (ISMS)
• Strong stakeholder management skills, with the ability to influence and advise senior leadership
• Experience leading, mentoring or developing security professionals
• Good understanding of GDPR and data protection principles
• Experience managing security suppliers, partners and managed service providers
• A pragmatic, proactive and solutions-focused approach

Nice to Have:

• CISM certification
• CISSP and/or ISO 27001 Lead Implementer/Auditor certification
• Experience leading ISO 27001 implementation and certification programmes
• Previous experience within the legal sector
• Experience managing external audits, client assurance and third-party security assessments
• Experience supporting security awareness and embedding a security-first culture

This is a great opportunity for an experienced security leader to take genuine ownership of a growing cyber and information security function and have a direct influence on the organisation's security strategy and culture.