Information Security Manager

Construction Sector

About the Role

An exciting opportunity has arisen for an experienced Information Security Manager to join a growing and forward-thinking organisation. Reporting to senior leadership, you will be responsible for developing, implementing, and maintaining the company's information security strategy, ensuring the protection of business-critical data, systems, and infrastructure.

This position offers the opportunity to shape and enhance the organisation's security posture while working closely with both technical and non-technical stakeholders across the business.

Key Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls.
• Lead and manage the organisation's information security and cyber security strategy.
• Ensure compliance with ISO 27001, Cyber Essentials, UK GDPR, and other applicable standards and regulations.
• Conduct security risk assessments and implement appropriate mitigation measures.
• Manage security incidents, investigations, and response activities.
• Monitor emerging threats and vulnerabilities, providing recommendations to strengthen security controls.
• Support internal and external security audits and compliance programmes.
• Deliver security awareness training and promote a strong security culture throughout the business.
• Collaborate with IT teams and third-party providers to ensure secure systems and services.
• Produce regular reports and updates for senior management on security risks and performance.

Requirements

• Proven experience working in an Information Security or Cyber Security Management role.
• Strong understanding of information security frameworks, policies, and industry best practices.
• Experience with ISO 27001 and supporting or managing security compliance programmes.
• Knowledge of risk management, security assessments, vulnerability management, and incident response.
• Experience developing and maintaining security policies, procedures, and controls.
• Strong understanding of data protection legislation and UK GDPR requirements.
• Ability to work confidently with both technical and non-technical stakeholders across the organisation.
• Excellent communication, influencing, and problem-solving skills.
• High levels of integrity, professionalism, and attention to detail.
• Relevant professional qualifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor would be highly advantageous.

What's on Offer?

✅ Competitive salary and benefits package
✅ Hybrid and flexible working arrangements
✅ Career progression opportunities within a growing organisation
✅ Ongoing professional development and certification support
✅ Collaborative and supportive working environment
✅ Opportunity to play a key role in shaping the company's cyber security strategy

This is a summary of a vacancy from the advertiser. Read the full job description and apply →