Security Risk & Compliance Lead

Janes; Manchester; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading security and defense company in Manchester is seeking a knowledgeable Security Specialist to oversee compliance and vulnerability management. You will lead programs aligned with security standards, conduct risk assessments, and collaborate with technical teams to resolve security issues. The ideal candidate has over 6 years of experience in Information Security and is well-versed in industry standards. This full-time role offers a chance to work in a dynamic environment with a focus on security and innovation.

Benefits

27 days of annual leave

Healthy half (0.5 day leave every 6 months for wellbeing)

Private medical insurance – Bupa

Maternity leave (100% of basic salary for the first 26 weeks)

Paternity leave (100% of basic salary for 6 weeks)

Life cover

Access to LinkedIn Learning

Access to an on-site gym (Only in Croydon)

Qualifications

• 6+ years experience in Information Security, Risk and Compliance.
• Knowledge of security and compliance standards like ISO 27001, Cyber Essentials, NIST, CMMC.
• Expertise in Defender/Azure, Microsoft 365 & AWS Security controls/compliance.
• Experience with vulnerability / attack surface monitoring tools.
• Experience of Supply Chain compliance.

Responsibilities

• Own and coordinate the security testing roadmap.
• Responsible for leading ISO27001 & Cyber Essentials programmes.
• Conduct regular risk assessments to identify potential security threats and vulnerabilities.
• Lead on security assessment of suppliers.
• Recommend appropriate mitigation strategies.
• Monitor and audit IT systems for compliance.

Skills

Information Security

Risk Management

Compliance

Vulnerability Management

Problem Solving

ISO 27001

Cyber Essentials

Cloud Security

Job description

A leading security and defense company in Manchester is seeking a knowledgeable Security Specialist to oversee compliance and vulnerability management. You will lead programs aligned with security standards, conduct risk assessments, and collaborate with technical teams to resolve security issues. The ideal candidate has over 6 years of experience in Information Security and is well-versed in industry standards. This full-time role offers a chance to work in a dynamic environment with a focus on security and innovation.