Information Security Manager
Working Hours: Full-time
Job Type: Contract - Inside IR35
Contract Length: 12 months
Daily Rate: Up to £725 Umbrella / £525 PAYE
Location: Salisbury – Hybrid (4 Days Per Week On-Site)
Security Clearance: Active DV Required
About the Role
Our client is looking for an experienced Information Security Manager to support the delivery of cyber security strategy, assurance and risk management within a highly secure defence environment.
Working closely with the Deputy Chief Information Security Officer (CISO), you will provide technical security leadership, oversee network and application security testing, and coordinate remediation activities with IT suppliers and security assurance teams.
This is a senior security role requiring strong experience in cyber risk management, network security, cloud infrastructure and security governance.
You will play a key role in translating strategic security objectives into practical, risk-based decisions while supporting security practitioners and improving organisational cyber resilience.
Responsibilities
Lead network and application security testing, coordinating remediation with IT suppliers and assurance teams.
Support the CISO and Deputy CISO in implementing cyber security strategy, policies and procedures.
Conduct and advise on Cyber Risk Assessments and Cyber Improvement Plans.
Provide expert security guidance to operational teams, balancing business needs with security risks.
Assess and improve security across multi-site IP networks, cloud infrastructure and operational technology.
Review security controls, identify vulnerabilities and recommend appropriate mitigation measures.
Collaborate with security practitioners, suppliers and stakeholders to strengthen cyber resilience.
Communicate complex security risks, recommendations and decisions clearly to technical and non-technical audiences.
Essential Experience & Technical Skills
Proven experience in information security management, cyber security assurance or senior security advisory roles.
Strong knowledge of multi-site IP networks, including their operation, protection and monitoring.
Experience securing public cloud infrastructure and/or operational technology (OT).
Demonstrable experience conducting Cyber Risk Assessments and developing Cyber Improvement Plans.
Strong understanding of security testing, vulnerability management and remediation processes.
Experience making risk-based security decisions within complex organisations.
Previous experience operating within secure, defence or similarly regulated environments.
Excellent communication skills, with the ability to explain complex security matters clearly.
Desirable Experience
Experience working directly with CISOs, Deputy CISOs or senior security leadership teams.
Knowledge of UK Government and defence cyber security frameworks and assurance requirements.
Experience coordinating security activities across multiple IT suppliers.
Familiarity with security policy development, governance and compliance.
Experience supporting operational security teams and translating strategic objectives into practical controls.