Information Security Manager

Construction Sector

About the Role

An exciting opportunity has arisen for an experienced Information Security Manager to join a growing and forward-thinking organisation. Reporting to senior leadership, you will be responsible for developing, implementing, and maintaining the company's information security strategy, ensuring the protection of business-critical data, systems, and infrastructure.

This position offers the opportunity to shape and enhance the organisation's security posture while working closely with both technical and non-technical stakeholders across the business.

Key Responsibilities

• Develop, implement, and maintain information security policies, procedures, and controls.

• Lead and manage the organisation's information security and cyber security strategy.

• Ensure compliance with ISO 27001, Cyber Essentials, UK GDPR, and other applicable standards and regulations.

• Conduct security risk assessments and implement appropriate mitigation measures.

• Manage security incidents, investigations, and response activities.

• Monitor emerging threats and vulnerabilities, providing recommendations to strengthen security controls.

• Support internal and external security audits and compliance programmes.

• Deliver security awareness training and promote a strong security culture throughout the business.

• Collaborate with IT teams and third-party providers to ensure secure systems and services.

• Produce regular reports and updates for senior management on security risks and performance.

Requirements

• Proven experience working in an Information Security or Cyber Security Management role.

• Strong understanding of information security frameworks, policies, and industry best practices.

• Experience with ISO 27001 and supporting or managing security compliance programmes.

• Knowledge of risk management, security assessments, vulnerability management, and incident response.

• Experience developing and maintaining security policies, procedures, and controls.

• Strong understanding of data protection legislation and UK GDPR requirements.

• Ability to work confidently with both technical and non-technical stakeholders across the organisation.

• Excellent communication, influencing, and problem-solving skills.

• High levels of integrity, professionalism, and attention to detail.

• Relevant professional qualifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor would be highly advantageous.

What's on Offer?

✅ Competitive salary and benefits package ✅ Hybrid and flexible working arrangements ✅ Career progression opportunities within a growing organisation ✅ Ongoing professional development and certification support ✅ Collaborative and supportive working environment ✅ Opportunity to play a key role in shaping the company's cyber security strategy