Cyber Security Manager

Cyber Security Manager - Birmingham (hybrid working, 2 day per week WFH)

£75,000 - £80,000 PA (plus excellent benefits)

Information Security Manager sought by a well-known and public-facing organisation with numerous sites spread across the county. The business is involved in significant, complex and critical logistical operations, providing services to hundreds-of-thousands.

As a public-facing, Critical National Infrastructure business the Information Security Manager will be a crucial component in ensuring the effective management of both the technical cyber security environment and wider information security management piece for the business.

In this role, you'll take a proactive leadership approach to strengthening cybersecurity measures, cultivating a security-first mindset across the business, and ensuring alignment with industry regulations. Reporting to the Head of IT, you'll oversee a Security Engineer and collaborate with both internal teams and external partners to uphold best practices in IT security.

Key Responsibilities:

• Work with the Head of IT to design, refine, and implement a robust cyber security roadmap that effectively mitigates risks.
• Maintain and manage security policies and procedures to ensure compliance with industry best practices.
• Embed "Security by Design" principles into all technological projects and initiatives.
• Promote a strong IT and cybersecurity awareness culture, encouraging accountability at all levels.
• Develop, refine, and execute a forward-thinking Information Security Strategy.
• Continuously assess security threats, risks, and capabilities to identify and mitigate vulnerabilities.
• Establish, manage, and monitor third-party SOC (Security Operations Center) services.
• Conduct security audits, address findings, and ensure compliance with regulations like GDPR and data protection laws.

Required Experience:

• Experience in an cyber security focussed role involving management of strategy and oversight in the deployment of security controls.
• Ideally have experience setting up and running of SOC services ( either internal or SOCaaS )
• Ideally come from a 'hands on' SecOps/Infrastructure background
• Extensive experience with GDPR and data protection, together with extensive knowledge of IS standards including ISO and NIST.
• Security assessment frameworks (threat modelling, controls assessment, risk assessment)
• Ideally hold a relevant qualifications; CISSP, CISM or similar.
• Understanding of TOGAF methodology would be beneficial, although is not a requirement.

Some travel required between Birmingham and London.