Information Security Manager (Hybrid)

We are seeking an Information Security Manager for a global retail organisation based near Manchester or Midlands (hybrid position) on a permanent basis.
This is a hands-on security management role responsible for overseeing governance, risk, compliance, and security operations across global regions. Develop and implement information security policies, standards, and procedures across global operations.
Enterprise Risk Management & Supply Chain Security
Maintain and improve the global information security risk management framework.
Conduct regular security risk assessments and support mitigation planning.
Manage supply chain security, including vendor risk assessments and responses to customer due diligence.

Incident Response Policy & Preparedness
Develop and maintain cybersecurity incident response policies and playbooks.
Work with regional IT teams to ensure incident response processes are well understood and consistently applied.
Oversee third-party risk management, including onboarding and ongoing assessments.

Build strong relationships with internal stakeholders across global IT and business functions.
5+ years of experience in cybersecurity, IT governance, or risk management roles.
~ Proven experience in developing and maintaining security policies, audit readiness, and risk frameworks.
~ Strong communication and documentation skills to support policy rollout and stakeholder engagement.