OneAdvanced
Information Security Manager - Senior Consultant
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
ITS Information Security Managementroles – Senior Individual Contributor
About the Role
Join OneAdvanced, where IT Security Management delivers real security outcomes—not just paperwork. Our Information Security Managers (ISMs) are embedded as their customers’ security advocates:
- Technically credible
- Data-driven
- Accountable for measurable estate improvement
We combine recognised frameworks (e.g., NIST CSF, ISO/IEC 27001) with deep technical context, live threat intelligence, and AI-accelerated delivery.
This is a senior individual contributor role for someone with a technical background: security operations, security engineering, or infrastructure. You’ll understand how IT estates are built, run, and exploited—and drive remediation to closure.
What You Will Do
- Own security posture holistically: Assess, explain, improve, and evidence progress with data.
- Lead vulnerability management: Prioritise critical findings based on exploitability, exposure, and customer environment—not just voluminous reports.
- Work hands-on with raw data: Pull security tooling exports, write queries (e.g., KQL/SQL), build Power BI dashboards, and present clear, actionable estate insights.
- Collaborate with technical resolver teams (e.g., infrastructure, DBAs, network engineers) as a peer—not a passive signpost. Drive scope, remediation, and validation.
- Translate threats into actionable guidance: Identify CVEs and attacker techniques relevant to each customer, delivering targeted, immediate recommendations.
- Advice C-level IT leaders: Shape security strategy and risk-based decisions rooted in the customer’s actual estate—not abstract frameworks.
- Pragmatic framework application: Use NIST CSF/ISO 27001 as tools for improvement, not compliance checklists.
- Support incident response: Participate in training, exercises, and live incidents alongside SOC and resolver teams.
- Leverage AI daily: Accelerate analyses, reports, and automations—building prompt libraries, playbooks, and AI-assisted workflows.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You Will Have
Eligibility: Applicants must have the legal right to work in the UK at the time of application.
Essential Technical Experience
- A bold technical foundation in one or more of:
- SOC triage and detection
- EDR/vulnerability tooling
- Hardening (e.g., patching, firewall, endpoint configurations)
- Running IT estates (e.g., Active Directory, Microsoft 365, networking, endpoints)
- Proven vulnerability management: Hands-on ownership across the full cycle—from scan data to prioritisation and confirmed remediation.
- Strong data fluency: Comfortable with:
- Raw security tool exports
- KQL/SQL queries
- Advanced Excel operations
- Building and maintaining custom Power BI reports
- Threat intelligence expertise: Track active threats and attacker TTPs, and translate them into clear guidance for IT leaders
- AI tooling mastery: Agile adoption and innovation with AI accelerators, including:
- Creating prompt libraries
- Automating workflows
- Developing AI-assisted processes
attrots and Personal Qualities
- Credibility with executive leadership: Able to challenge with constructive persuasion and align technical teams behind risk-based decisions.
- Multi-customer agility: Balancing priorities across a managed service portfolio while owning customer outcomes.
- Degree or equivalent professional experience (need-invaluable; certifications like CySA+, Security+, CASP+/SecurityX or vendor/cloud certs are welcome but not mandatory).
What We Do For You
Wellbeing – That Meets You Where You Are
- 26 days’ holiday (+ bank holidays) + flexibility to buy extra
- Paid Volunteering (1 day per year)
- Family leave policies that set new benchmarks:
- 26 weeks paid maternity/adoption leave (100% pay)
- 4 weeks paid paternity leave (100% pay)
- 22 weeks shared parental leave (100% pay)
- + 5 days’ paid bereavement leave
- Income protection: Up to 75% salary for 5 years if you can’t work due to illness
- 24/7 Employee Assistance Programme (confidential support available)
- Comprehensive private medical insurance (including maternity services; no medical history exclusions)
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Financial Rendurance
- Performance-based rewards (e.g., company-wide bonuses/OTE, commission structures for client-facing roles)
Growth Through inquiry
- SkillsHub: Customised learning pathways, leadership training, and a vast library of courses
- External development funding: Multiple channels for certifications, apprenticeships, and upskilling
Making a Difference – Together
- MatchIt!: OneAdvanced matches your fundraising (e.g., charity runs) dollar-for-dollar
- Pennies from Heaven: Round-up spare change donations to causes aligned to your values
- Hybrid/remote flexibility, ULEV car schemes (choose from 1,000+ electric vehicle models), and other portable benefits via our RewardHub.
Who We Are
OneAdvanced simplifies complexity in sectors critical to society: Education, Government, Healthcare, Legal, Manufacturing, Housing, and Retail. As a UK’s largest B2B software+services firm (Birmingham HQ, with global delivery):
What We Deliver
- SaaS workflow applications (e.g., HR, financing, asset management, procurement tools)
- Managed IT services: Hosting, security management, and cloud-to-mainframe app modernisation
- OneAdvanced AI: Private AI platform tailored to UK government, education, and healthcare organisations
Our Commitment
- Technical dexterity with integrity: We handle sensitive data on behalf of the public sector—security = fraternity.
- Diverse, equitable culture: We actively champion each voice, driving innovation through inclusive perspectives.
- ESG in action: Our Environmental, Social, and Governance (ESG) strategy permeates operations—backing people, customers, and planet.
Become Part Of It
Start your journey today at www.oneadvanced.com.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills