Information Security Manager Core-Asset Consulting

CyberNorth; Newcastle upon Tyne; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading firm in Newcastle is searching for an experienced Information Security Manager to lead their security initiatives. This role requires a strong focus on audits and compliance, as well as the ability to develop and implement effective information security strategies. Candidates must possess a thorough understanding of security frameworks and legislative requirements, coupled with excellent stakeholder engagement skills. This is a key position that offers the opportunity to shape the security landscape within the organization.

Qualifications

• Experience in information security management, preferably in financial services.
• Strong familiarity with ISO/IEC 27001:2022 and audit experience.
• Ability to engage with business stakeholders and translate goals into security requirements.

Responsibilities

• Lead security assessments and compliance reviews aligned to ISO 27001.
• Develop and maintain the information security strategy and policies.
• Monitor and respond to changes in the information security landscape.

Skills

Information security management

Information security frameworks

Stakeholder engagement

Legislative and regulatory knowledge

Risk management

Job description

Overview

We are pleased to partner with a leading firm in Newcastle, who are seeking an experienced Information Security Manager to join their team. This role will have a strong focus on audit, reporting into senior leadership, and offers the chance to shape and drive the information security agenda in a growing business.

Skills & Experience

• Experience in an information security management role – preferably within financial services but not essential.
• Strong familiarity with information security frameworks and standards (e.g., ISO/IEC 27001:2022) and experience leading audits and compliance programmes.
• Excellent ability to engage with business stakeholders, translate business goals into security requirements and embed security into business processes.
• Robust understanding of legislative and regulatory requirements (e.g., GDPR, sector‑specific regulation) and ability to embed policy, standards and governance.
• Experience in developing and implementing information security strategies, policies and controls across corporate IT, physical security and business operations.
• Strong risk management mindset: able to assess security risks, propose controls balanced with business imperatives, and articulate these to senior management.

Core Responsibilities

• Lead and coordinate security assessments, audits and compliance reviews – particularly aligned to ISO 27001 and Cyber Essential + frameworks and manage physical and IT security collaborations with facility teams.
• Develop and maintain the information security strategy and related policies, plans and processes.
• Monitor, analyse and respond to changes in the IT and information security landscape; provide timely guidance on emerging threats and vulnerabilities.
• Ensure organisational compliance with relevant legislation, standards and internal policies (e.g., GDPR, sector‑specific regulation).
• Drive risk‑based decision‑making and ensure that security solutions and controls are aligned with the firm’s risk appetite and business objectives.
• Deliver presentations and reports to senior leadership and key stakeholders as the designated subject matter expert in information security.

<3Equal Opportunities

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

Job Reference

Job reference:16279

Eligibility

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.