> Markdown version of [/jobs/ext/32862-information-security-manager-ism](https://www.wearedevelopers.com/jobs/ext/32862-information-security-manager-ism). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Manager (ISM) - **Company:** Sightsavers - **Location:** Haywards Heath, UK (Remote available) - **Salary:** £45,405.0 - £53,418.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Security, PCI Data Security Standards, Software Vulnerability Management, Information Technology, Cybercrime - **Published:** May 22, 2026 - **Apply:** https://reliefweb.int/job/4213075/information-security-manager-ism ## About the Role * Strong experience working in information security, cyber risk or security governance within a complex organisation * A recognised professional certification such as CISSP, CISM or ISO 27001 (or equivalent experience) * Solid understanding of security standards and compliance frameworks, including PCI-DSS * Experience applying security principles in a practical, real-world environment * Confident working with both technical and non-technical stakeholders * Strong communication skills, with the ability to translate complex information into clear, practical guidance * Highly organised, with strong attention to detail and the ability to manage competing priorities * Experience working within an outsourced or multi-supplier environment Desirable: * Good technical understanding of IT infrastructure and security technologies * Ability to explain technical risks and concepts to a range of audiences across the organisation * Experience supporting audits, compliance frameworks or certification processes * An interest in staying up to date with emerging threats, trends and best practice in information security ## Description In this role, you will lead Sightsavers' information security function, ensuring our systems, services and data are protected from evolving cyber threats. You will drive the development and delivery of our information security strategy, working closely with teams across the organisation to strengthen controls and embed secure ways of working. This will include overseeing key areas such as vulnerability management, patching and compliance activities, as well as identifying and assessing risks and supporting colleagues to put effective, practical safeguards in place. Acting as the organisation's subject matter expert, you will play a central role in managing audits, supporting incident response and ensuring we meet key security standards, while continuously improving our overall security approach., * Lead the development and delivery of Sightsavers information security strategy, ensuring it aligns with organisational priorities * Oversee key security controls, including patching, vulnerability management and change control processes * Identify and assess information security risks across the organisation, supporting teams to implement practical solutions * Provide expert advice and guidance on information security controls to protect systems, services and data * Act as the organisation's subject matter expert for audits, reviews and security assurance activities * Maintain compliance with key standards and certifications, including Cyber Essentials and PCI-DSS * Lead or support the investigation of security incidents, ensuring lessons learned are captured and acted upon * Provide guidance on information governance, including data access, classification and retention practices * Monitor emerging cyber threats, trends and regulatory requirements, recommending improvements where needed * Promote awareness of information security across the organisation, encouraging good practice and secure behaviours * Build strong relationships with internal teams, suppliers and external partners to embed security into day-to-day operations * Support continuous improvement of security processes, ensuring controls remain effective and fit for purpose ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)