Information Security Manager

TL;DR

Information Security Manager: Providing security assurance services for classified project delivery across Personnel, Physical, and Information Security domains with an accent on interpreting client requirements, leading accreditations, and managing security governance. Focus on measuring control effectiveness, mitigating risks, reviewing supply chain competencies, and leading security incident investigations.

Location: Hybrid, Birmingham, UK

Company

Leading independent organisation in cost management, quantity surveying, project management, and advisory services for the built environment with global network and heritage over two centuries.

What you will do

• Liaise with client security and project teams to interpret, implement, and monitor contractual security requirements.
• Lead security audit accreditation and certifications for external compliance.
• Develop and implement governance and processes for security assurance.
• Plan and deliver assurance activities including briefings, onboarding, and training.
• Measure security control performance, identify improvements, and manage risks.
• Line manage a small team of three and interface with internal stakeholders.

Requirements

• Hold SC clearance or ability to achieve it.
• Experience as a security manager or controller.
• Knowledge of HMG/MOD security framework (CE+, DefStan, NIST).
• Knowledge of risk management methodologies.
• Excellent Microsoft 365 skills (Word, PowerPoint, Excel).
• Excellent interpersonal, organisational skills and ability to maintain confidentiality.

Nice to have

• 5 GCSEs or equivalent including Maths and English.
• FSC, IPSA, ISO27001 knowledge.

Culture & Benefits

• Hybrid and flexible working with family-friendly policies.
• Competitive salary, generous holiday, extra days purchase option.
• Private healthcare, dental, eyecare, gym membership, cycle to work.
• Continuous learning, mentoring schemes, professional subscriptions.
• Season ticket loan, social events, charity activities.
• Inclusive culture in employee-owned business focused on diversity and wellbeing.