Information Security Manager

Cyber Security Manager / InfoSec Manager

Location Bedord / Hybrid 1-2 days a Week in the office

Salary >£75k

We're looking for an experienced Information Security Manager (Network / Infrastucture) with a strong technical background in network security, infrastructure security and cyber security. This role would suit someone who has progressed from a technical infrastructure or security engineering position into Information Security, Governance, Risk & Compliance (GRC) or Security Assurance.

Working closely with Infrastructure, IT Operations and Engineering teams, you'll help ensure security is embedded across networks, servers, cloud environments and business systems. You'll provide technical guidance on security architecture, vulnerability management, secure configuration, patching, identity and access management, firewalls, endpoint security and infrastructure hardening, while also leading information security governance, risk management and compliance activities.

You'll play a key role in maintaining and improving the Information Security Management System (ISMS), supporting ISO 27001 certification, managing security audits, supplier assurance, security incidents and business continuity planning. You'll also work with technical teams to assess vulnerabilities, review penetration testing results, oversee remediation activities and ensure security controls are implemented effectively across on-premise and cloud infrastructure.

To be successful, you'll have previous experience in Network Security, Infrastructure Security, Cyber Security Engineering, Systems Engineering or Infrastructure Engineering before moving into an Information Security or Cyber Security Management role. You'll have a strong understanding of firewalls, switches, routing, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, vulnerability management, security monitoring, networking principles and infrastructure hardening, alongside experience with ISO 27001, Cyber Essentials, Governance, Risk & Compliance (GRC), security audits and information security frameworks.

Key skills: Information Security Manager, Cyber Security Manager, Network Security, Infrastructure Security, Security Engineering, Infrastructure Engineering, Cyber Security, ISO 27001, ISMS, Azure Security, Microsoft 365 Security, Active Directory, Firewalls, Network Infrastructure, Vulnerability Management, Patch Management, Endpoint Security, Security Operations, Governance, Risk & Compliance, GRC, Security Assurance, Security Audits, Business Continuity, Disaster Recovery, Incident Response, Cyber Essentials