Information Security Manager (Client Company) in Milton Keynes

About MIB

At MIB our people are passionate about making roads safer by getting uninsured and hit-and-run drivers off our roads.

Working in partnership with the Police, Insurers and Government our collective aim is to make it a thing of the past but, until that’s accomplished, we’re here to compensate victims quickly, fairly and compassionately.

Last year we helped more than 34,000 people struck by uninsured and hit-and-run drivers and paid over £400 million in compensation to support victims rebuild their lives.

About the role

Are you passionate about information security and helping organisations build secure, resilient ways of working?

Information Security Manager

As Information Security Manager, you'll play a pivotal role in supporting MIB's client companies to strengthen their security posture, manage risk with confidence and embed effective security practices across their organisations.

Acting as a trusted advisor and subject matter expert, you'll provide specialist guidance, assurance and project support, helping client companies develop and maintain proportionate security policies, standards, controls and frameworks that align with their business objectives and contractual obligations.

This is an influential role where you'll work closely with stakeholders to ensure information security risks are understood, managed effectively and integrated into everyday operations.

You'll help organisations protect the confidentiality, integrity and availability of their information and systems, enabling them to operate securely in an increasingly complex threat landscape.

If you enjoy building trusted relationships, translating security requirements into practical business solutions and making a tangible impact across multiple organisations, this is an exciting opportunity to shape and strengthen information security at a strategic level.

This will be achieved by

• Providing a focal point within MIB for client company information security guidance, assurance and subject matter expertise.
• Supporting the alignment of client company information security activity to agreed client company objectives and obligations.
• Supporting an effective information security risk management approach for client companies, helping assess information security risks, agree proportionate treatment plans and track progress to closure.

Key responsibilities

• General
• Support the Head of Information Security and the Information Security GRC Manager by providing client company insight to inform the wider security strategy where relevant.
• Share knowledge, guidance and good practice with colleagues supporting client company information security activity.
• Work with Security Operations, Engineering and Architecture functions to ensure client company requirements are understood and appropriately reflected in advice, assurance and control recommendations.
• Provide client company teams with security-focused support, training and consultancy to help them understand and meet applicable security standards, policies and legislation.
• Engage with ODT leadership, supporting functions and business stakeholders to support the delivery of effective information security practices within client companies.
• Produce and share management information on the performance of client company information security controls, providing assurance on maturity, risk exposure and control effectiveness.
• Recommend improvements to client company information security standard, guidance and control expectations through continuous improvement activity.
• Develop and maintain procedures and guidance that help client companies understand and respond to relevant threats and vulnerabilities.
• Support client companies to embed appropriate information security behaviours and practices that help protect their information and information systems.
• Review and advise on information security clauses, obligations and controls within client company contracts.
• Keep up to date with emerging trends, technologies and legislation relevant to client company information security and assurance.
• Act as the client company point of contact for information security governance, risk, assurance and compliance matters.
• Support client company governance forums by providing clear reporting, insight and challenge on key information security risks, audit outcomes, control maturity and remediation progress.
• Support the development, review and alignment of client company information security policies, standards, procedures and guidance.
• Maintain a proportionate client company information security risk and compliance approach, including information security risk assessments, treatment plans, escalation, tracking and a rolling compliance schedule.
• Review, challenge and track client company control actions, vulnerabilities and information security incidents to ensure appropriate mitigation and management focus.
• Coordinate client company audit and assurance activity, including audit readiness, evidence quality, audit findings, remediation plans and action closure.
• Measure and report on the performance and compliance of key client company information security controls, including policy, process and relevant technical control expectations.
• Support client company initiatives, solutions and services where information security advice, assurance or oversight is required.

Skills and Experience

• A thorough understanding of the information security threat landscape, significant risks, technical developments and regulatory expectations as they apply to client company environments.
• Strong interpersonal and stakeholder management skills are essential, as the role must influence and support client company teams and stakeholders without direct ownership of their operational delivery.
• Extensive experience as an information security practitioner, ideally within a complex supplier, client or multi-stakeholder environment.
• Direct experience of supporting information security governance, risk and compliance activity in a stakeholder-facing or advisory capacity.
• Experience and knowledge of supporting information security risk assessments, including review, challenge and assurance of risk treatment plans.
• Proven experience of developing or supporting information security policies, procedures, standards and guidance.
• Experience supporting ISO27001-aligned controls, assurance activity or equivalent information security frameworks.
• Ability to harness the commitment and contribution of colleagues outside the direct span of control.
• Excellent written and oral communication skills.
• Ability to research, assess and recommend improvements to governance, risk and compliance capabilities and maturity.
• Ability to present ideas in non-technical, business-friendly and accessible language.
• Ability to effectively prioritise and execute tasks in a high-pressure environment.

One or more of the following qualifications are desirable

• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified in the Governance of Enterprise IT (CGEIT)
• Level: 3
• Working Hours: 35
• Working Pattern: Monday - Friday, 9am - 5pm
• Office Location: Milton Keynes
• Job Type: Permanent

IT kit supplied to you
£320 (before tax) start up allowance
Hybrid working (2 days in the office per week)

Other Benefits include

• Contributory Group Stakeholder Personal pension scheme
• Life Assurance
• Employee Incentive Scheme
• 27 days holiday (plus bank holidays)
• Holiday purchase scheme
• Sports and Social Club
• 24/7 Employee Assistance Programme
• Free access to online tools to support mental and physical health
• Enhanced maternity, paternity and adoption leave
• 1 volunteer day each year and charity matched funding scheme

We believe in a workplace where everyone can be themselves.

Through our different ideas, personalities and experiences, we redefine what is possible every day.

And regardless of your colour, age, race, gender, sexual orientation or anything else you consider yourself to be, there is a place for you at MIB.

A place where you can bring your best self to work every day.

We know that great leaders bring different experiences and perspectives.

If you're excited about this opportunity but don't meet every requirement, we encourage you to apply.

We value potential, curiosity and the ability to make a positive impact as much as technical expertise.

We aim to keep this advert open until the closing date, but on occasion we may close it early if application numbers are high