Senior Information Security Manager

Secure Trust Bank PLC; Metropolitan Borough of Solihull; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading financial institution is seeking an Information Security Manager to shape their security strategy and ensure compliance with various frameworks. The ideal candidate will lead the Information Security Management Framework and manage regulatory compliance. Key responsibilities include overseeing audits, coordinating incident responses, and driving continuous improvements in security practices. The role is based in Solihull with hybrid working options, allowing attendance to the office 50% of the week.

Benefits

Career development opportunities

Inclusive culture

Collaborative environment

Qualifications

• Strong knowledge of industry standards and methodologies.
• Experience in a highly regulated environment (financial services preferred).
• Excellent communication skills and ability to influence stakeholders.

Responsibilities

• Lead and maintain the Information Security Management Framework.
• Monitor compliance with regulatory and legal requirements.
• Manage a risk-based approach to information security.
• Oversee penetration tests, vulnerability scans, and audits.
• Coordinate responses to live cyber security incidents.
• Drive continuous improvement with threat intelligence and data.
• Develop and implement an information security awareness programme.
• Produce reports and metrics for governance committees.

Skills

NIST CSF

ISO 27001/2

COBIT

PCI DSS

Vulnerability & Patch Management

Network Security

Penetration Testing

Firewalls

IPS

VPNs

Mobile Device Management

Identity & Access Management

Cloud Security

Education

Experience in a highly regulated environment

Job description

Do you want to play a critical role in protecting customer and corporate information while shaping the future of cyber security at Secure Trust Bank? We’re looking for an Information Security Manager to lead our security strategy and ensure we stay ahead of evolving threats.

What you’ll do

• Lead and maintain the Information Security Management Framework, policies, and standards, ensuring alignment with best practices such as NIST Cyber Security Framework and ISO 27001.
• Monitor, enable, and enforce compliance with regulatory and legal requirements, including DPA, PCI DSS, and payment system standards.
• Manage a risk-based approach to information security, delivering effective technical and non-technical controls.
• Oversee penetration tests, vulnerability scans, and audits, ensuring timely remediation and reporting.
• Coordinate responses to live cyber security incidents, collaborating with internal teams and external partners.
• Drive continuous improvement by leveraging threat intelligence, SIEM data, and SOC insights.
• Develop and implement an information security awareness and training programme across technical and non-technical teams.
• Produce reports and metrics for governance committees, including the Board Risk Committee and Executive Committee.

What you’ll bring

• Strong knowledge of industry standards and methodologies: NIST CSF, ISO 27001/2, COBIT, PCI DSS.
• Experience in a highly regulated environment (financial services preferred).
• Expertise in IT and Information Security technologies, including:
  • Vulnerability & Patch Management
  • Network Security & Penetration Testing
  • Firewalls, IPS, VPNs
  • Mobile Device Management
  • Identity & Access Management
  • Cloud Security
• Excellent communication skills and the ability to influence stakeholders at all levels.
• A proactive mindset with a passion for continuous improvement and risk management.

Why join us?

• Impactful work: Protect the integrity and security of our customers’ data and our business.
• Inclusive culture: We value diversity and believe our differences make us stronger.
• Career development: Opportunities to grow your expertise and leadership skills.
• Collaborative environment: Work with talented professionals who share your commitment to security.

The role is based in our Solihull Head Office, we are a hybrid working business and attend the office 50% of the week.