Information Security Manager | M365 & Compliance)

Cyber Security Lead — West Sussex (hybrid, 3 days on site) | c.£75,000, negotiable No layer above you filtering the work. No layer below you holding the tooling. Most cyber security roles are one voice in a function. This one is the function. Are you already doing this job without the title? Third line and ready to own a programme, or leading security in an organisation small enough that you’re still in the tooling yourself — both fit. The hands‑on experience is what counts. You’d own the programme end to end for a UK technology business whose value sits almost entirely in its intellectual property — a substantial patent portfolio and long‑term licensing relationships with international industrial partners. That changes the conversation. Security here isn’t a compliance cost to be argued for at budget time; it’s protection of the asset the company is built on. Is this you? Governance is the priority. Specifically: Information security best practice and certification — ISO 27001 and Cyber Essentials Detailed working knowledge of audit processes and procedures Hands‑on experience in a third line operational role What you’d be doing (and why it’s broader than most) Governance sits at the centre. Policies, standards and documentation to maintain and develop. Certification work against ISO 27001 and Cyber Essentials. Audit support, with the remediation actions owned by you through to completion rather than handed to someone else to chase. Around that, you’d own the technical estate — core Microsoft 365 security, email security controls, wider infrastructure. Vulnerability management, penetration testing and security assessments. And you’d be the key technical contact during incidents, coordinating investigation and remediation. The outsourced SOC reports into you as primary technical contact, so you’re managing a partnership rather than living in a ticket queue. The piece that’s genuinely unusual: as the partner network expands, you’d work with procurement, legal and technical teams assessing cyber risk across suppliers and licensing partners. Few security roles at this level get that close to the commercial side of the business. Where you’d be doing it West Sussex, three days on site. A growing business where the stakeholders you need are reachable directly — no three‑layer approval path between you and a decision. What you’d get c.£75,000, negotiable for the right governance depth Pension with up to 8% employer contribution (3% from you) via salary sacrifice, with the National Insurance saving passed back to you 28 days’ annual leave plus public holidays Life assurance at 4x salary , plus income protection Private medical insurance Health cash plan — dental and therapies for you and your children, plus gym discounts Employee assistance programme covering counselling and legal support #J-18808-Ljbffr