SC Cleared - Information Security / Cyber Manager
OverviewWe are seeking an experienced Information Security Manager to lead the assurance, performance management, and continuous improvement of our cybersecurity capabilities. The successful candidate will play a critical role in governing service providers, uplifting control maturity, and ensuring our security posture aligns with business objectives, regulatory expectations, and recognised industry frameworks.
Key Responsibilities - Cybersecurity Governance & Assurance
*Oversee performance of third-party service providers through structured governance forums.
*Deliver written and verbal updates on cyber risks and strategic priorities to senior stakeholders.
*Assure evidence and control effectiveness against NIST CSF and ISO 27001.
*Conduct cybersecurity risk assessments and develop mitigation plans aligned to business objectives.
*Develop and report cybersecurity performance metrics for senior management.
*Lead or support security incident response, recovery, and post-incident analysis.
*Oversee patching, vulnerability management and system hardening processes.
*Support implementation and assurance of cloud and data security solutions.
Key Responsibilities - Technical Leadership & Expertise
*Translate complex technical information into clear guidance for senior leaders.
*Provide insight into IT architecture, hybrid/cloud models, and security methodologies.
*Advice on security tooling includes Firewalls, IDS/IPS, CDN, Endpoint Protection, SIEM, SOAR, DLP, PKI and cryptography.
*Provide security guidance for cloud models such as IaaS, PaaS, SaaS, CASB, Zero Trust and micro-segmentation.
*Demonstrate a strong understanding of IAM including RBAC, ABAC, PAM, provisioning, compliance and SSO.
*Apply threat-modelling approaches including OWASP, PASTA, STRIDE, MITRE ATT&CK, threat intelligence and threat hunting.
Desirable Experience
*Design and assure secure network architectures and enterprise security solutions.
*Designing or assuring SOC operations, including monitoring and response.
*Overseeing penetration testing, vulnerability assessments and remediation lifecycle.
*Integrating threat intelligence into operations and strategic planning.
Essential QualificationsCertified Information Security Manager (CISM)Certified Information Systems Security Professional (CISSP)Security ClearanceSecurity Check (SC) Clearance is required.
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C’s, Privacy Policy and Disclaimers which can be found at hays.co.uk