Information Technology Security Manager

Rising Associates
Reading, UK
17 days ago
Apply on www.collegerecruiter.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£70,000.0 - £80,000.0
Working hours
Regular working hours

Tech stack

Artificial Intelligence Software System Penetration Testing Microsoft Azure Cyber Security Identity and Access Management IT Management Security Information and Event Management Wide Area Networks Okta Microsoft InTune SentinelOne Expertise

Job description

An established and growing international technology-led organisation is seeking a Group Information Security Manager to support and develop its cyber security, governance, compliance, and risk management capabilities across multiple European locations.

This is a newly enhanced role offering the opportunity to influence security strategy, drive security best practice, and work closely with senior stakeholders to strengthen the organisation’s overall cyber security posture.

Reporting to the Group Infrastructure, Support & Security Director, you will play a key role in shaping and delivering a security-first culture while balancing operational and commercial business objectives., * Support the development and implementation of the Group-wide Information Security and Cyber Security strategy.

  • Establish and maintain security policies, standards, governance frameworks, and risk management processes.
  • Develop and maintain the Group IT Security Risk Register.
  • Lead cyber security risk assessments and remediation planning activities.
  • Manage incident response, cyber investigations, and escalation procedures.
  • Oversee annual penetration testing programmes and security audits.
  • Support compliance initiatives including Cyber Essentials, Cyber Essentials Plus, ISO 27001, and similar frameworks.
  • Produce security reporting for IT leadership and senior business stakeholders.
  • Conduct security due diligence for acquisitions and support post-acquisition integration activities.
  • Support business continuity and disaster recovery planning.
  • Drive security awareness programmes and promote a strong security-conscious culture throughout the organisation.
  • Manage relationships with external security providers, partners, and auditors.

Technology Environment

You will work across a modern technology estate including:

  • Microsoft Azure
  • Microsoft Intune
  • Okta Identity & Access Management
  • Zscaler
  • SentinelOne
  • Mimecast
  • Abnormal AI
  • Tenable
  • KnowBe4
  • SD-WAN Technologies
  • SIEM and Security Monitoring Platforms

Requirements

We are looking for an experienced security professional with a strong blend of technical expertise, governance experience, and stakeholder engagement skills.

You will ideally have:

  • Experience in an Information Security Manager, Cyber Security Manager, IT Security Manager, or similar role.
  • Strong understanding of cyber security governance, risk management, and compliance.
  • Experience implementing and supporting security frameworks such as Cyber Essentials, Cyber Essentials Plus, ISO 27001, or similar.
  • Strong knowledge of Microsoft Azure security and cloud governance.
  • Experience working with modern identity, endpoint protection, email security, and security monitoring platforms.
  • Experience managing cyber security incidents and supporting recovery planning.
  • Excellent communication and stakeholder management skills.
  • A proactive, commercially aware, and solution-focused approach.

Benefits & conditions

  • £70,000 - £80,000 base salary
  • Performance-related bonus
  • Comprehensive benefits package
  • Hybrid working
  • European remit and stakeholder exposure
  • Opportunity to influence Group-wide cyber security strategy
  • Long-term career development within a growing international organisation

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.collegerecruiter.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

2:10 min

Managing open source ports using the zopen package manager

Igor Todorovski · World Congress 2023

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann Chris Heilmann +2 · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

1:53 min

Managing infrastructure limitations with managed Amazon Aurora databases

Dharin Shah Dharin Shah · World Congress 2025

Videos

See all

Related articles

See all