At a Glance
- Tasks: Lead the charge in safeguarding our information systems from cyber threats and breaches.
- Company: Join a forward-thinking organisation committed to security and diversity.
- Benefits: Attractive salary, hybrid work model, training, and development opportunities.
- Other info: Dynamic team environment with a focus on growth and collaboration.
- Why this job: Make a real difference in enhancing our security culture and protecting vital data.
- Qualifications: Relevant security certifications and experience with ISO 27001 are essential.
The predicted salary is between 78000 - 88000 € per year.
Salary: £78,000 - £88,000 DOE
Contract Type: Permanent, full time
Work Life Balance: Hybrid with travel to Northampton when required (likely once per week)
Candidate Journey: Our goal is to reply to applications within 3 working days. Additionally, we make sure to acknowledge, evaluate, and respond to all applications as a way of showing our appreciation for your time and effort in applying to us.
The Role: We are looking for an experienced Information Security Manager to play a key role in protecting our organisation’s information systems, networks, and data from cyber threats and security breaches. Reporting directly to the Director of Information Security, this role is responsible for supporting and delivering the organisation’s information security programme while ensuring strong technical controls, governance, and compliance across the business. This is a fantastic opportunity for a security professional who enjoys working across both technical security operations and strategic governance, helping to strengthen our security posture and build a strong security culture.
What will you do?
- Manage and oversee technical security controls to ensure compliance with ISO 27001:2022
- Coordinate and manage penetration testing activities across the business
- Support and manage security audits, assessments, and testing from a technical security perspective
- Develop, implement, and maintain information security policies, procedures, and standards
- Monitor threat intelligence and ensure the business is informed of emerging threats and appropriate remediation actions are taken
- Analyse potential security threats and vulnerabilities, ensuring processes are in place to effectively manage incidents
- Develop and test incident management procedures
- Review existing security tools and technologies, recommending improvements where necessary
- Identify, assess, and report on information security risks
- Build a strong understanding of how the organisation operates in order to effectively support security initiatives
- Build and maintain strong relationships with internal stakeholders, helping to promote and embed a strong security culture across the business
What we’re looking for:
- Relevant security certification such as CISSP, CISM, or CRISC
- ISO 27001 Lead Implementor/Auditor certification or at least 3 years’ experience supporting an ISO 27001 accredited organisation
- Strong knowledge of security risk and control frameworks, including ISO 27001, PCI DSS, and ITIL
- Proven experience developing and implementing information security policies and procedures
- Deep understanding of security technologies and controls
- Experience reviewing security control effectiveness, assessing maturity, and recommending improvements
- Experience managing security incidents, service improvements, and IT security risks
- Understanding of the benefits and risks associated with AI
- Knowledge of Data Protection Act 2018 and GDPR
- Understanding of Disaster Recovery and Business Continuity planning
- Experience working with cloud technologies
- Strong stakeholder management skills
- Excellent communication and presentation skills, with the ability to influence and engage stakeholders at all levels
We’re assembling a diverse team, where skills, not checkboxes, reign supreme, regardless of race, religion, sex, sexual orientation, gender identity or disability. Staysure Group welcomes all new starters with open arms, providing training, development opportunities, and great benefits.
Information Security Manager (Technical) employer: Staysure Group
Staysure Group is an exceptional employer that prioritises employee well-being and professional growth, offering a hybrid work model with the flexibility to balance personal and professional commitments. With a strong focus on fostering a diverse and inclusive work culture, employees benefit from comprehensive training and development opportunities, alongside competitive salaries and benefits. Located in Northampton, this role not only allows you to contribute to a vital information security programme but also to be part of a team that values collaboration and innovation in safeguarding the organisation's data.
StudySmarter Expert Advice🤫
We think this is how you could land Information Security Manager (Technical)
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, attend relevant events, and engage with professionals on platforms like LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching the company and its security practices. Familiarise yourself with their tech stack and be ready to discuss how your experience aligns with their needs. Show them you’re not just another candidate, but the perfect fit!
✨Tip Number 3
Don’t underestimate the power of follow-ups! After an interview, drop a quick thank-you email to express your appreciation and reiterate your interest in the role. It keeps you fresh in their minds and shows your enthusiasm.
✨Tip Number 4
Apply through our website for the best chance at landing that role! We prioritise applications made directly through us, so make sure you take advantage of that. Plus, we aim to respond within three working days, so you won’t be left hanging!
We think you need these skills to ace Information Security Manager (Technical)
Some tips for your application 🫡
Tailor Your CV:Make sure your CV reflects the skills and experiences that match the Information Security Manager role. Highlight your relevant certifications and any experience with ISO 27001, as we want to see how you can contribute to our security programme.
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're passionate about information security and how your background makes you a great fit for us. Don’t forget to mention your understanding of security technologies and your approach to stakeholder management.
Showcase Your Achievements:When detailing your experience, focus on specific achievements rather than just listing duties. We love to see quantifiable results, so if you've improved security measures or led successful audits, let us know!
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered promptly. Plus, we aim to respond within 3 working days, so you won’t be left hanging!
How to prepare for a job interview at Staysure Group
✨Know Your Stuff
Make sure you brush up on your knowledge of ISO 27001 and other relevant security frameworks. Be ready to discuss how you've applied these in previous roles, as well as any specific experiences with penetration testing and incident management.
✨Showcase Your Communication Skills
As an Information Security Manager, you'll need to engage with various stakeholders. Prepare examples of how you've effectively communicated complex security concepts to non-technical audiences. This will demonstrate your ability to influence and promote a strong security culture.
✨Be Ready for Scenario Questions
Expect questions that put you in hypothetical situations related to security incidents or compliance challenges. Think through your approach to managing these scenarios, including how you'd assess risks and implement solutions.
✨Research the Company Culture
Familiarise yourself with the organisation's values and culture. Understanding their approach to security and how they embed it across the business will help you align your answers with their expectations and show that you're a good fit for the team.
