Information Security Leader: Strategy, Risk & Cloud

Business Stream Ltd; City of Edinburgh; On-site; GBP 55,000 - GBP 65,000; Full time

Job summary

A leading water services provider in the UK is seeking an experienced Information Security Manager to lead their information security program. The role involves safeguarding data and systems from cyber threats while implementing security strategies and standards across the business. Ideal candidates will have substantial experience in information security management, incident response, and regulatory compliance. You will engage with various stakeholders and manage third-party security assessments, contributing to a secure organizational environment.

Benefits

Salary up to £65,000 DOE plus a bonus up to 20%

31 days annual leave and six bank holidays

Subsidised staff restaurant

Free gym membership

Salary sacrifice schemes including cycle to work

Qualifications

• Experience in leading or owning an information security programme.
• Strong knowledge of industry frameworks like ISO 27001/2 and NIST.
• Capability in incident response from detection to lessons learned.
• Excellent translation of technical risk into business impact.
• Experience conducting threat modelling and secure design reviews.

Responsibilities

• Lead the information security strategy and program implementation.
• Manage system vulnerabilities and incident response processes.
• Conduct risk assessments and engage with stakeholders effectively.
• Oversee supplier security and foster a culture of cyber awareness.

Skills

Information security management

Incident response

Stakeholder engagement

Cloud security (Azure, M365)

Regulatory knowledge (GDPR)

Communication skills

Education

CISSP

CISM

CCSP

ISO 27001 Lead Implementer

CEH

GIAC

Tools

SIEM

SOAR

Terraform/Bicep

Job description

A leading water services provider in the UK is seeking an experienced Information Security Manager to lead their information security program. The role involves safeguarding data and systems from cyber threats while implementing security strategies and standards across the business. Ideal candidates will have substantial experience in information security management, incident response, and regulatory compliance. You will engage with various stakeholders and manage third-party security assessments, contributing to a secure organizational environment.