Information Security Manager: Governance & Risk Leader

Kier Group plc; Rushden; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

A leading construction firm in the UK is seeking an Information Security Manager to lead their security practice. This hybrid role involves assessing governance, risk, and compliance across the Transportation division. The ideal candidate will have expertise in security certifications like CompTIA Security+, strong knowledge of cloud security, and experience with risk management frameworks. This role includes responsibilities such as guiding stakeholders on IT security risks and ensuring adherence to company policies. Attractive benefits are offered tailored to individual needs.

Qualifications

• Certifications such as CompTIA Security+, ISO 27001 Lead Implementor/Auditor, CISM, or CISSP.
• Technical knowledge in IAM, network segmentation, OWASP, and DevSecOps.
• Experience applying frameworks like ISO 27001 and NIST.
• Understanding of information management and ITIL frameworks.

Responsibilities

• Lead Information Security practice and assess governance and compliance.
• Provide consultative advice and coaching on security matters.
• Create status reports and briefings for management.
• Support bids by providing security review and assurance.
• Ensure adherence to Kier policies and procedures.

Skills

Security expertise backed by certifications

Strong technical knowledge in cloud security

Proven ability in risk management

Experience in secure-by-design principles

Familiarity with key standards such as ISO 27001

Job description

A leading construction firm in the UK is seeking an Information Security Manager to lead their security practice. This hybrid role involves assessing governance, risk, and compliance across the Transportation division. The ideal candidate will have expertise in security certifications like CompTIA Security+, strong knowledge of cloud security, and experience with risk management frameworks. This role includes responsibilities such as guiding stakeholders on IT security risks and ensuring adherence to company policies. Attractive benefits are offered tailored to individual needs.