> Markdown version of [/jobs/ext/344561-information-security-manager](https://www.wearedevelopers.com/jobs/ext/344561-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Manager - **Company:** Together Limited - **Location:** Cheadle, UK - **Contract:** Permanent contract - **Skills:** Software as a Service, Cloud Computing, Cyber Security - **Published:** June 13, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=5a75b7660eb95da4 ## About the Role Do you have experience in SaaS?, You are a proactive and detail-oriented Information Security professional with experience working in regulated environments and a passion for improving security maturity. Essential Experience * Proven experience in third-party security due diligence * Experience delivering Information Security training and awareness * Hands-on experience with Microsoft Purview and DLP * Strong understanding of risk management and governance * Experience working within regulated environments * Experience developing policies, processes and standards * Knowledge of cloud and SaaS-based environments Desirable * CISM or equivalent certification * Strong presentation and stakeholder engagement skills * Experience reviewing technical security designs ## Description Reporting to the Chief Information Security Officer, you will play a critical role in supporting the development and continuous improvement of our Information Security governance, risk management, and assurance framework. You will be a seasoned Information Security professional able to support and maintain governance and leading frameworks such as NIST CSF and the UK Cyber Assessment Framework (CAF) to identify, assess and managing risks across the Group. You will develop risk metrics (KPIs/KRIs), deliver security training and awareness programmes and lead third-party cyber, information and AI security due diligence. This would include ongoing monitoring of risks and incidents. The role also involves supporting audits, driving continuous improvement across policies and controls, and implementing monitoring solutions using Microsoft Purview and DLP. Working closely with the CISO and Cyber Security team, you will contribute to governance, reporting and incident response, while building strong stakeholder relationships across IT, Risk and the wider business. in a nutshell, responsibilities include: * Maintain and enhance Information Security governance frameworks aligned to NIST CSF and CAF * Define and report on security risk metrics, KPIs and KRIs * Identify and assess Information Security risks across business and technology environments * Deliver engaging security awareness and training programmes * Conduct third-party cyber, information and AI security due diligence * Support audit and assurance activities, including evidence collation * Drive continuous improvement across policies, processes and controls * Support Microsoft Purview and DLP monitoring capabilities * Partner with the CISO on governance, reporting and incident response activities ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)