> Markdown version of [/jobs/ext/2992276-it-security-design-manager](https://www.wearedevelopers.com/jobs/ext/2992276-it-security-design-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Design Manager

- **Company:** Lorien
- **Location:** Leeds, UK
- **Contract:** Temporary contract
- **Skills:** Agile Methodology, Artificial Intelligence, Cloud Computing, Cyber Security, Machine Learning, PCI Data Security Standards, Trusted Systems, Web Platforms, Cloud Platform System, CIS Benchmarks
- **Published:** September 19, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb7f798e3fcf30a7e0a391453a78e58a48/eaa

## About the Role

* Industry-recognised certification such as CISSP, CISM or equivalent
 * Experience with frameworks and standards such as CIS Controls, ISO 27001, NIST CSF, PCI DSS and GDPR
 * Strong technical expertise in solution design and architecture, with proven experience in secure systems design
 * A track record of conducting security risk assessments and providing design guidance
 * Broad understanding of information security processes and technologies spanning networks, applications, cloud, mobile and web platforms
 * Familiarity with agile methodologies and modern development practices
 * Knowledge of securing emerging technologies including AI, machine learning and cloud-native platforms
 * Excellent communication skills, with the ability to explain technical concepts clearly to non-technical stakeholders
 * Strong analytical, organisational and problem-solving capability
 * Commercial experience in IT security, at consultant or management level
 * A demonstrated ability to research and acquire new knowledge and skills quickly

## Description

An established international organisation is seeking an IT Security Design Manager to join its security design team on a contract basis.
This is a role for someone who wants to shape security outcomes at the point decisions are made rather than assess them afterwards. You will sit alongside project and architecture teams from initiation onwards, embedding security requirements into IT and business initiatives from the outset. The remit blends hands-on technical depth in solution design and architecture with the advisory skill to influence stakeholders who are not security specialists.
As a key point of contact for project teams, you will make sure new initiatives receive appropriate security assessment and pragmatic, risk-based design advice. You will conduct and oversee security risk assessments across projects, defining control requirements and ensuring alignment with organisational standards, while bringing genuine expertise in solution design and architecture so that security principles are embedded in technical decisions rather than bolted on afterwards. Working closely with IT, business and architecture teams, you will integrate security by design into delivered solutions and support the ongoing refinement of the IT Security Framework so practice stays consistent as the estate evolves. Where significant risks emerge, you will identify, influence and escalate them to senior security leadership, ensuring critical issues are resolved promptly and without derailing project objectives.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Project Fugu: Extending the web](https://www.wearedevelopers.com/videos/832-project-fugu-extending-the-web)
- [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Dev Digest 196: AI Killed DevOps, LLM Political Bias & AI Security](https://www.wearedevelopers.com/magazine/659-dev-digest-196-ai-killed-devops-llm-political-bias-ai-security)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)