Information Security Manager

Location: Flexible on location - hybrid working available, with occasional travel to the office as required. Hours: 37.5 hours per week - some flexibility on hours available if desired, just let us know when you speak to us.

We are unable to offer certificates of sponsorship to any candidates in this role.

This is an exciting opportunity to lead information security practice and processes across Kier Group Services. You'll play a key role in protecting our organisation by assessing security needs, driving strategy implementation, and ensuring compliance with industry standards. Working across IT, HR Shared Services, and Finance and Commercial Shared Services, you'll provide expertise in security governance, risk management, and compliance whilst building strong partnerships with our technology teams and business units.

What will you be responsible for?

As an Information Security Manager, you'll be working within the IT Security team, supporting them in safeguarding Kier's information assets and maintaining robust security standards. Your day to day will include:

• Developing and implementing information security strategies aligned with Kier's policies and industry standards including ISO27001 and Cyber Essentials
• Managing security governance, risk assessments, and compliance requirements across the organisation
• Overseeing security partners and vendors, ensuring they deliver value and meet agreed performance indicators
• Creating security management plans that incorporate regulatory, legal, and compliance requirements for government and client contracts
• Designing and delivering security awareness training programmes to empower employees with the knowledge to protect information

• You hold or are willing to obtain Security Clearance (SC) and Baseline Personnel Security Standard (BPSS)
• You have experience with security standards such as ISO27001, Cyber Essentials, List-X, or List-N
• You possess security certifications such as CompTIA Security+, ISO 27001 Lead Auditor, CISM, or CISSP
• You have worked in hybrid infrastructure environments combining cloud, collocated, and on-premises technologies
• You bring strong communication skills and can translate complex security concepts into practical guidance for diverse audiences