Group Systems Security Manager

You will operate within AQA's Enterprise Technology Security & Risk team to provide security consultancy, oversight and assurance across the Group. You will maintain and evolve the Information Security Management System (ISMS) and ensure solutions and services proportionately balance security needs with desired business outcomes, supporting AQA's mission to benefit learners of all abilities., * Provide security consultancy and oversight across Enterprise Technology and the wider Group, ensuring solutions meet business and security requirements and align with ISO 27001.

• Own and evolve ISMS policies, standards and audits; lead incident response and supplier assurance; surface risks and drive mitigation and prevention.
• Partner with business areas to embed secure ways of working; plan and deliver periodic security testing and technology security roadmaps across systems and services.

Do you have experience in Information security?, * A strong track record in providing information security, cyber security and data protection advice and guidance.

• A solid background in managing information security, cyber and data protection risks.
• Confident handling of security incidents, including events, weaknesses and breaches.
• A proven ability to deliver supplier and third party security assurance.
• Skilled in acting as a security SME within programmes or projects, with good working knowledge of ISO 27001.

• 25 days' annual leave, rising to 30 with service, plus bank holidays and extra closure days at Christmas
• a 35-hour working week with flexible working arrangements
• an excellent contributory pension scheme (6%-11.5% depending on your contribution)
• life assurance, BUPA PMI, and health cash plan
• enhanced maternity and paternity schemes

This key role will help shape group wide security at a pivotal time of growth, as AQA expands into digital exams and international markets. You'll play a key role in strengthening how we protect our systems and information while supporting innovation across a complex, modern technology estate. As threats continue to evolve, you'll apply sound judgement and a balanced, thoughtful approach to ensure security enables progress rather than slows it down. This is a chance to influence meaningful change, work with a wide range of teams and make a visible impact on an organisation with a clear educational purpose