Strategic IT Security Leader — Governance & Risk

Sanderson; England; Hybrid; GBP 68,000 - 83,000; Full time

Job summary

Sanderson is seeking an IT Security Manager to own the security direction across a large organisation with outsourced IT. The role focuses on governance, risk, and strategy, with accountability for supplier security delivery and improvements.

Based in Wiltshire with only an occasional on-site presence, the role requires strong stakeholder engagement and the ability to drive change through to delivery. A senior security lead in a complex environment is ideal.

Qualifications

• Significant experience within information security, cyber security or IT security management.
• Experience developing, owning or delivering an organisation-wide security strategy.
• Strong experience across security governance, risk management, assurance and policy development.
• Experience operating within an outsourced or supplier-led technology environment.
• Strong third-party supplier and vendor management experience, with the confidence to challenge delivery and hold partners accountable.
• Experience developing and delivering security improvement, transformation or change roadmaps.
• Broad understanding of cyber security controls, vulnerabilities, incidents and remediation, without necessarily being responsible for hands-on technical implementation.
• Ability to assess security risk and translate technical issues into clear business risks and priorities.
• Strong stakeholder management skills, including the ability to influence and provide constructive challenge at a senior level.
• Experience working across complex organisations with multiple internal and external stakeholders.
• A proactive approach, with the ability to identify what needs to happen, take ownership and ensure activity is driven through to completion.

Responsibilities

• Own, develop and continually evolve the organisation's IT security strategy, ensuring it supports wider technology and business objectives.
• Take ownership of IT security governance, risk and assurance.
• Develop, maintain and improve security policies, standards and governance processes.
• Define and shape the IT security roadmap, identifying priorities and driving security improvements and change.
• Provide security leadership and guidance across technology programmes, projects and wider organisational change.
• Manage and provide oversight of key third-party technology and security suppliers.
• Hold suppliers accountable for security delivery, agreed actions, service levels and remediation activity.
• Proactively challenge suppliers and stakeholders where security standards or delivery are not meeting expectations.
• Maintain oversight of security risks, vulnerabilities, incidents and remediation activities delivered through third-party providers.
• Ensure appropriate controls, reporting and assurance are in place across the outsourced technology environment.
• Provide clear security advice and recommendations to senior stakeholders, translating technical risks into understandable business impacts.
• Work collaboratively with IT, business stakeholders and external partners to ensure security is embedded within technology decision-making and change.
• Identify opportunities to strengthen the organisation's overall security posture and ensure agreed improvements are delivered.

Job description

Sanderson is seeking an IT Security Manager to own the security direction across a large organisation with outsourced IT. The role focuses on governance, risk, and strategy, with accountability for supplier security delivery and improvements.

Based in Wiltshire with only an occasional on-site presence, the role requires strong stakeholder engagement and the ability to drive change through to delivery. A senior security lead in a complex environment is ideal.