4Square Recruitment Ltd
Information Security Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Manager – GRC & Assurance
We are looking for an experienced Information Security Manager to lead and strengthen the organisation’s information security capability. This is a key role responsible for protecting systems, data, infrastructure, and users against evolving cyber threats while ensuring security controls remain practical, effective, and aligned with business needs.
You will oversee security operations, risk management, governance, incident response, and security awareness activities. Working closely with IT, senior stakeholders, third-party suppliers, and wider business teams, you will help maintain a secure technology environment and support ongoing compliance with relevant security standards and best practices.
Key Responsibilities
- You will lead the development, implementation, and maintenance of information security policies, procedures, and controls across the organisation.
- You will manage security risks, vulnerabilities, audits, and assessments, ensuring appropriate remediation plans are in place and tracked through to completion.
- You will oversee incident response processes, investigating security events and coordinating effective responses to minimise business impact.
- You will work with internal teams and external suppliers to ensure infrastructure, applications, cloud services, and networks are designed and operated securely.
- You will support compliance with relevant frameworks and standards such as ISO 27001, Cyber Essentials, NIST, GDPR, or similar.
- You will promote a positive security culture through user awareness, training, guidance, and stakeholder engagement.
- You will provide reporting and recommendations to senior leadership on security risks, trends, controls, and improvement plans.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills and Experience
- The ideal candidate will have strong experience in IT security, cyber security, information security, or security operations within a business environment.
- You should have a good understanding of security governance, risk management, vulnerability management, incident response, access control, network security, endpoint security, and cloud security.
- Experience working with security frameworks such as ISO 27001, NIST, Cyber Essentials, CIS Controls, or similar would be highly beneficial.
- You will be confident engaging with technical and non-technical stakeholders, translating security risks into clear business language.
- Relevant certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer, CompTIA Security+, or similar would be advantageous.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Candidate Profile
This role would suit a proactive and pragmatic security professional who can balance risk, compliance, and operational delivery. You will be comfortable taking ownership, influencing stakeholders, and improving security maturity across a growing or complex environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills