Details:
- Salary: £65,000 - 75,000 - Annum
- Job Type: Permanent
- Job Status: Full-Time
- Salary Per: Annum
- Location: Bedford Bedfordshire
- Date: 10 hours ago
Description:
Cyber Security Manager / InfoSec Manager
Location Bedord / Hybrid 1-2 days a Week in the office
Salary >£75k
We're looking for an experienced Information Security Manager (Network / Infrastucture) with a strong technical background in network security, infrastructure security and cyber security. This role would suit someone who has progressed from a technical infrastructure or security engineering position into Information Security, Governance, Risk & Compliance (GRC) or Security Assurance.
Working closely with Infrastructure, IT Operations and Engineering teams, you'll help ensure security is embedded across networks, servers, cloud environments and business systems. You'll provide technical guidance on security architecture, vulnerability management, secure configuration, patching, identity and access management, firewalls, endpoint security and infrastructure hardening, while also leading information security governance, risk management and compliance activities.
You'll play a key role in maintaining and improving the Information Security Management System (ISMS), supporting ISO 27001 certification, managing security audits, supplier assurance, security incidents and business continuity planning. You'll also work with technical teams to assess vulnerabilities, review penetration testing results, oversee remediation activities and ensure security controls are implemented effectively across on-premise and cloud infrastructure.
To be successful, you'll have previous experience in Network Security, Infrastructure Security, Cyber Security Engineering, Systems Engineering or Infrastructure Engineering before moving into an Information Security or Cyber Security Management role. You'll have a strong understanding of firewalls, switches, routing, Windows Server, Active Directory, Microsoft 365, Azure, endpoint security, vulnerability management, security monitoring, networking principles and infrastructure hardening, alongside experience with ISO 27001, Cyber Essentials, Governance, Risk & Compliance (GRC), security audits and information security frameworks.