Security Manager

Salary: £60,000 - 70,000 per year

Requirements

• Minimum 3 years experience in a Security Manager, Information Security Manager, GRC Manager or similar role
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance
• Experience with Cyber Essentials Plus
• Experience maintaining and managing security risk registers
• Experience coordinating vulnerability scanning, penetration testing and remediation
• Information security incident management/investigation experience
• Experience with Microsoft 365, Azure and AWS environments
• Strong stakeholder management and communication skills
• Experience working with external auditors and third-party security assessments
• Security certifications such as CISSP, CISA or ISO 27001 Lead Auditor/Implementer would be advantageous

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus
• Conducting security risk assessments, internal audits and control reviews
• Maintaining and monitoring the organisational security risk register
• Coordinating vulnerability scanning, penetration testing and remediation
• Supporting information security incident investigation and resolution
• Supporting business continuity and resilience planning
• Coordinating third-party security audits across European operations
• Working with technical and non-technical stakeholders across the UK and internationally to continuously improve security practices

Technologies

• AWS
• Azure
• Incident Management
• Microsoft 365
• Security
• Office 365
• Cloud

More

We are recruiting for an experienced Security Manager to join an established international technology organisation operating within the intelligent mobility, road technology and payments sector. This is a broad information security position combining cyber security, governance, risk, compliance and operational resilience, and you will work across UK and European operations to help maintain key security accreditations while ensuring vulnerabilities, risks and security requirements are effectively managed across the business. The environment includes high-volume, payment-focused technology, making PCI DSS, information security and business resilience particularly important. The role is based in Leeds with 2–3 days per week in the office, and we offer a salary of £60,000 to £70,000 per year plus excellent company benefits and incentives. This is a newly created role that provides a clear career path and an opportunity to join a genuine industry leader transforming the transport technology space through innovation and technology.