Information Security Manager

Harvey Nash

The Opportunity:

This is an excellent opportunity to join a UK based leading professional services organisation. In this role, you will have the chance to shape and influence the organisation’s security landscape, working closely with senior leadership to ensure the success of their technology initiatives.

The position offers a platform for professional growth and the ability to make a significant impact on the organisation’s future.

The Role:

As the Information Security Manager, you will be responsible for developing and implementing a comprehensive information security strategy, with a primary focus on ensuring compliance with ISO 27001, GDPR, and Cyber Essentials.

In this role, you will play a key part in establishing security protocols, evaluating cybersecurity threats and spearheading risk reduction strategies. You will also contribute to enhancing and executing the organisation’s incident management plans, ensuring swift and efficient handling of any security incidents.

• Impactful Work: Lead the design and implementation of a robust information security strategy.
• Leadership Role: Engage with senior management, influencing key decisions and driving cultural change within the organisation.
• Professional Growth: Benefit from opportunities for career advancement and continuous learning in a dynamic and supportive environment.

Who You Will Be:

You will be an experienced Information Security professional and will possess a strong technical background, whilst being well-versed in data protection and information security frameworks like ISO 27001 and NIST. Your leadership skills allow you to guide teams effectively and you excel at communicating complex security concepts to non-technical stakeholders. You are proactive, detail-oriented, and passionate about protecting critical information assets.

• Experienced Leader: You bring at least 2 years of experience in information security management, ideally within a professional services context.
• Technically Skilled: You hold certifications such as CISSP or CISM and have a deep understanding of security frameworks and risk management.
• Effective Communicator: You can clearly articulate security strategies and risks to both technical and non-technical audiences.