IT Security Design Manager

An established international organisation is seeking an IT Security Design Manager to join its security design team on a contract basis. This is a role for someone who wants to shape security outcomes at the point decisions are made rather than assess them afterwards. You will sit alongside project and architecture teams from initiation onwards, embedding security requirements into IT and business initiatives from the outset. The remit blends hands-on technical depth in solution design and architecture with the advisory skill to influence stakeholders who are not security specialists. As a key point of contact for project teams, you will make sure new initiatives receive appropriate security assessment and pragmatic, risk-based design advice. You will conduct and oversee security risk assessments across projects, defining control requirements and ensuring alignment with organisational standards, while bringing genuine expertise in solution design and architecture so that security principles are embedded in technical decisions rather than bolted on afterwards. Working closely with IT, business and architecture teams, you will integrate security by design into delivered solutions and support the ongoing refinement of the IT Security Framework so practice stays consistent as the estate evolves. Where significant risks emerge, you will identify, influence and escalate them to senior security leadership, ensuring critical issues are resolved promptly and without derailing project objectives.

• Industry-recognised certification such as CISSP, CISM or equivalent
• Experience with frameworks and standards such as CIS Controls, ISO 27001, NIST CSF, PCI DSS and GDPR
• Strong technical expertise in solution design and architecture, with proven experience in secure systems design
• A track record of conducting security risk assessments and providing design guidance
• Broad understanding of information security processes and technologies spanning networks, applications, cloud, mobile and web platforms
• Familiarity with agile methodologies and modern development practices
• Knowledge of securing emerging technologies including AI, machine learning and cloud-native platforms
• Excellent communication skills, with the ability to explain technical concepts clearly to non-technical stakeholders
• Strong analytical, organisational and problem-solving capability
• Commercial experience in IT security, at consultant or management level
• A demonstrated ability to research and acquire new knowledge and skills quickly