Information Security Manager

About the Role

Our client is seeking a strategic and proactive Information Security Manager to lead their security operations from their offices in Cardiff . This role is crucial for establishing and maintaining a strong security posture across the organisation, ensuring the protection of sensitive data and systems against evolving threats. You will be responsible for developing and executing the company's information security strategy, managing a team of security professionals, and ensuring compliance with all relevant regulations. This is an excellent opportunity for an experienced leader to shape the security direction of a growing enterprise.

Key Responsibilities

• Develop and implement the overall information security strategy and roadmap.
• Lead, mentor, and manage the information security team, fostering a culture of continuous improvement.
• Oversee the implementation and management of security controls, policies, and procedures.
• Manage the security incident response process, including investigation, remediation, and reporting.
• Ensure compliance with relevant industry regulations and standards (e.g., GDPR, ISO 27001).
• Conduct risk assessments and develop mitigation plans to address identified vulnerabilities.

Requirements

• Minimum of 7 years of experience in information security , with at least 3 years in a management or leadership role.
• Proven track record of developing and implementing successful security programs.
• Strong understanding of cybersecurity principles, threat landscape, and risk management methodologies.
• Experience with security governance, risk, and compliance (GRC) frameworks.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant professional certifications such as CISSP, CISM, or CRISC are required.

Benefits

• Competitive salary and executive-level benefits package.
• Opportunity to lead and shape the security function within a prominent organisation.
• Comprehensive health insurance and wellness programs.
• Generous pension scheme and long-term incentive plans.
• Professional development budget for conferences, training, and certifications.