Information Security Lead

Overview

Title: Information Security Lead

Location: Birmingham, West Midlands

Salary: Up to £80,000 + 10% Bonus

Working arrangements: Hybrid - 1/2 days on site

Harvey Nash is partnering with an exciting B2B SaaS scaleup to recruit an Information Security Lead. The organisation is innovative in the logistics space. This role is responsible for maturing the security posture across the business and reporting to the CPTO.

Responsibilities

• Own and evolve the information security strategy, policies, and procedures.
• Lead risk assessments and manage the security risk register.
• Drive compliance initiatives including ISO 27001, GDPR, and client-specific standards.
• Oversee vulnerability management and coordinate penetration testing.
• Develop and execute incident response plans.
• Deliver engaging security awareness training across the business.
• Evaluate and manage third-party vendor security risks.
• Collaborate with engineering teams on monitoring and alerting systems.
• Stay ahead of emerging threats and industry trends.
• Support business continuity and disaster recovery planning.
• Be the go-to contact for security queries from corporate clients, prospects, and auditors.

Qualifications

• Strong knowledge of security frameworks (ISO 27001, NIST).
• Experience with GDPR and corporate client compliance requirements.
• Technical understanding of web app vulnerabilities and testing methodologies.
• Proven ability to develop and implement security policies and procedures.
• Skilled in risk assessment and stakeholder communication.
• Excellent interpersonal and influencing skills across all levels.
• Collaborative mindset with experience working across Engineering, IT, Legal, etc.
• Security certifications (CISSP, CISM, CompTIA Security+) are highly desirable.
• SaaS experience is a plus.

Additional details

Seniority level: Not Applicable

Employment type: Full-time

Job function: Information Technology

Industries: Software Development

How to apply

If this sounds like you or you would like to know more, apply directly or email an updated CV for a confidential chat around this exciting role and company

• Strong knowledge of security frameworks (ISO 27001, NIST).
• Experience with GDPR and corporate client compliance requirements.
• Technical understanding of web app vulnerabilities and testing methodologies.
• Proven ability to develop and implement security policies and procedures.
• Skilled in risk assessment and stakeholder communication.
• Excellent interpersonal and influencing skills across all levels.
• Collaborative mindset with experience working across Engineering, IT, Legal, etc.
• Security certifications (CISSP, CISM, CompTIA Security+) are highly desirable.
• SaaS experience is a plus.