Nuvion Tech
Information Security Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Lead / Information Security Lead
Bedford | Hybrid – 1 / 2 Days Office per week
£60,000 – £70,000 + Excellent Benefits | Permanent
Job Tags
Cyber Security | Information Security | GRC | ISO 27001 | Security Audits | Infrastructure Security
Are you an experienced Cyber Security or Information Security professional with a strong technical background combined with hands-on GRC, ISO 27001, and security audit experience? We're looking for a Cyber Security Lead / Information Security Lead to join a growing technology business in Bedford and take broader ownership of its Information Security and Cyber Security environment.
The ideal candidate will have 5+ years' experience across Cyber Security / Information Security, ideally having developed their career through Infrastructure, Network, or Security Engineering before progressing into broader Information Security responsibilities. Strong GRC and audit experience is essential. You'll need practical experience working with ISO 27001, ISMS, security audits, risk management, policies, controls, and compliance, combined with enough technical depth to work credibly with Infrastructure, IT Operations, and Engineering teams. This is an excellent next step for someone who wants to combine their technical security background with greater ownership across Information Security, GRC, governance, risk, compliance, and assurance.
What You'll Be Doing
As the Cyber Security Lead / Information Security Lead, you'll work closely with the Head of Information Security and key stakeholders across IT, Infrastructure, Development, Legal, and the wider business. You'll help maintain and continually improve the Information Security Management System (ISMS), supporting ISO 27001 certification and ensuring appropriate security policies, processes, and controls remain effective. A significant part of the position will involve GRC and security assurance, including security risk assessments, internal and external audits, customer assurance, supplier security assessments, and supporting certification and compliance activities. You'll also remain close to the technical security environment, working with technical teams across Infrastructure Security, Network Security, vulnerability management, patching, penetration testing, secure development, cloud security, and incident response. The role will also provide exposure to business continuity, disaster recovery, DPIAs, BIAs, Cyber Essentials, and security awareness, giving you broad ownership across both operational and governance-focused Information Security.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
We're looking for someone who can operate comfortably across both technical Cyber Security and Information Security GRC.
Your experience should include:
Information Security & GRC:
- ISO 27001, ISMS, security governance, risk management, policies, controls, compliance, and security assurance.
- Practical involvement in internal/external security audits, evidence gathering, remediation, certification, and customer/supplier assurance.
Technical Security:
- A strong understanding of Infrastructure Security, Network Security, vulnerabilities, patching, penetration testing, endpoints, identity/access, and security controls.
Security Operations & Resilience:
- Incident response, vulnerability remediation, business continuity, disaster recovery, and security improvement.
You'll ideally have 5+ years' experience within Cyber Security, Information Security, IT Security, Security Engineering, Infrastructure Security, or a related environment. We're particularly interested in candidates who started their careers in roles such as Infrastructure Engineer, Network Engineer, Security Engineer, Infrastructure Security Engineer, or Network Security Engineer and have subsequently developed strong Information Security, GRC, and audit experience.
Equally, you may currently be working as a Senior Cyber Security Analyst, Senior Information Security Analyst, Information Security Consultant, Cyber Security Consultant, Technical Security Lead, or Information Security Lead and be ready for greater ownership.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Technical Credibility + GRC Experience
The balance is important.
We're not looking for a purely technical Security Engineer with limited governance or audit exposure, and equally, this isn't a purely compliance-led GRC position. The successful candidate will be technically credible enough to engage with Infrastructure, Network, and Engineering teams while having genuine hands-on experience across GRC, ISO 27001, ISMS, and security audits.
You'll be comfortable discussing a technical vulnerability or security control with an engineer, while also working with auditors and senior stakeholders around risk, compliance, policies, and security assurance.
Why Consider This Opportunity?
This is a great opportunity to move into a broader Cyber Security Lead / Information Security Lead position without leaving your technical security background behind. You'll have the opportunity to influence security strategy, strengthen the ISMS, support ISO 27001 and security audits, improve security controls, and work closely with technical teams to continually improve the organization's overall security posture.
Salary: £60,000 – £70,000 + Excellent Benefits
Location: Bedfordshire
Working Pattern: Hybrid – 1 Day a week Office
Employment: Permanent
Experience: 5+ Years Cyber / Information Security
Core Focus: Technical Security + GRC + Audit + ISO 27001
Interested?
If you're an experienced Cyber Security professional, Information Security professional, Senior Security Analyst, Security Engineer, or Information Security Consultant with a technical background and strong GRC, ISO 27001, and security audit experience, we'd like to hear from you. This could be an excellent next step if you're looking for greater ownership and the opportunity to develop into broader Information Security leadership. PLEASE NOTE we can't consider any visa status for this role.
Apply today for a confidential discussion.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location