> Markdown version of [/jobs/ext/328914-information-security-manager](https://www.wearedevelopers.com/jobs/ext/328914-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Manager - **Company:** Business Stream - **Location:** UK - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cyber Security, Security Information and Event Management, Software Vulnerability Management, Scripting, Cybercrime, Bicep, CIS Benchmarks, Terraform - **Published:** June 6, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/x/38367787/ ## About the Role Experience in information security, including leading or owning an information security programme, domain or team. Strong understanding of industry frameworks and standards such as ISO 27001/2, CIS Controls, NIST CSF/800-53, and established risk methodologies. Hands-on experience across cloud and modern IT security, particularly Microsoft Azure, M365, Entra, Sentinel, Purview, endpoint security and vulnerability management. Proven capability in incident response, from detection through to lessons learned. Excellent ability to translate technical risk into clear business impact, coupled with confident stakeholder engagement and executive-level reporting skills. Experience embedding security into change, conducting threat modelling, and steering secure design reviews. Solid understanding of regulatory requirements, including GDPR and other relevant industry regulations. Strong written and verbal communication skills, demonstrating clarity, influence and collaboration. Professional certifications such as CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, CEH or GIAC. Experience managing security certifications, third-party risk programmes and assurance activities. Exposure to SIEM engineering, SOAR, IaC security (Terraform/Bicep), scripting for automation, and security tooling optimisation. Knowledge of the water industry or its regulatory landscape. Previous management experience - leading a team and/or managing vendors. What's in it for you? You'll be a key team player in one of the largest water retailers in the UK, with lots of benefits and the chance to grow your career. ## Description We're looking for an experienced and forward-thinking Information Security Manager to lead and evolve our company's information security programme. In this pivotal role, you will be responsible for safeguarding our data, systems and services from ever-changing cyber threats, ensuring they remain secure, compliant and resilient. You'll shape and implement our information security strategy, set governance standards, and drive secure-by-design principles across the business. Working closely with colleagues across IT, Change, HR, Procurement, Compliance and more, you'll balance security, risk, usability and cost to support Business Stream's strategic goals. From managing system vulnerabilities, incident response and risk assessments, to leading supplier security oversight and championing a strong culture of cyber awareness, you will be our subject-matter expert and primary point of contact for all cybersecurity matters. This role also includes responsibility for operational partnerships, such as managed SOC, SIEM and threat-management services, and ensuring we continue to mature our security posture in line with recognised frameworks like ISO 27001, NIST and CIS Controls. If you're a strategic thinker with willingness and ability to get hands-on, this role offers the opportunity to make a meaningful impact across the organisation. What makes you just right for us? Essential skills, knowledge & experience You'll be a great fit if you bring ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)