Data, Development and Infosec Manager- Warrington or Llandudno- Hybrid

Overview

As InfoSec, Data & Development Manager you will steer security governance and lead the Data & Development team to deliver secure, innovative technology. You will partner with senior leaders to align technology, security and data strategy with company growth. You will drive risk management, audits, and secure software practices while exploring AI and automation to boost efficiency. This is a high-visibility role at a growing healthcare business backed by Sonova, offering a real opportunity to shape technology for colleagues and customers.

Pay / Benefits

• hybrid working
• competitive salary (DOE)
• 25–30 days annual leave + bank holidays
• Boots Discount Card
• Pension scheme & life assurance
• Flexible Benefits Box

Responsibilities

• Lead information security governance ensuring compliance with ISO27001, GDPR, PCI DSS and other standards
• Drive proactive cyber security activities: risk management, audits, vulnerability management and incident response
• Manage and develop the Data & Development team responsible for in-house web systems, development planning, testing and data provisioning
• Champion secure software development practices and embed security into the development lifecycle
• Identify opportunities to leverage AI, automation and data engineering to improve performance
• Produce governance reporting, risk updates and security metrics for senior leadership
• Build relationships across IT, external partners and Sonova colleagues
• Lead, coach and develop a high-performing technical team with a culture of innovation and continuous improvement

Key requirements

• Proven experience leading Information Security, Cyber Security or Security Governance
• Strong knowledge of ISO27001, GDPR, PCI DSS and security risk management
• Experience leading development and data teams delivering business-critical systems
• Solid understanding of Secure SDLC principles
• Experience driving AI, automation or digital transformation initiatives
• Excellent stakeholder management and communication skills
• Proven leadership of technical teams
• Professional certifications such as CISSP, CISM or ISO27001 Lead Implementer would be advantageous

• stakeholder management
• communication
• leadership
• ISO27001
• GDPR
• PCI DSS

…