Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits
Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation’s security strategy?
We’re seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.
Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.
Why Join?
- Lead and shape the organisation’s cyber security strategy
- Influence senior leadership and board-level stakeholders
- Own and deliver a technical security roadmap
- Manage and develop a dedicated security and risk team
- Hybrid working with just 2 days per week onsite
- Opportunity to make a lasting impact across a complex technology environment
Key Responsibilities
- Lead the IT Risk and Security function and manage a small team
- Develop and deliver the technical security roadmap
- Oversee IT security policies, controls, and governance frameworks
- Manage IT risk assessments, threat modelling, and mitigation activities
- Own the IT risk register and ensure risks are effectively monitored and managed
- Lead responses to significant cyber security incidents
- Oversee vulnerability management and remediation programmes
- Act as the organisation’s security subject matter expert, advising senior stakeholders and leadership teams
Requirements
- Proven experience in a senior IT Security, Cyber Security, or Information Security position
- Strong knowledge of risk management and threat analysis methodologies
- Experience implementing and maintaining security frameworks including ISO 27001
- Knowledge of Cyber Essentials and wider security best practices
- Experience developing security policies, controls, and procedures
- Ability to communicate and influence stakeholders at all levels
- CISSP, CISM, or similar security certification (or working towards) preferred
- Experience within a regulated environment
- Cyber resilience and security operations expertise
- Experience managing security professionals
- Strong commercial awareness and stakeholder management skills
Salary: Up to £74,000
We welcome applicants from all backgrounds. Our Client are an equal opportunities employer.
Right to work in the UK is required for this role.
#J-18808-Ljbffr…