Why choose us?

BRUSH Group provides the energy solutions that help power our built world. From power transformers to switchgear and engineering solutions, for generations, the BRUSH brand has stood for engineering excellence.

We are committed to supporting the global effort for industrial decarbonisation and sustainable development and have set ambitious objectives to achieve our target of net zero greenhouse gas emissions by 2050. 🌍

What's the role?

The role is part of the BRUSH Group IT Operations function, with the purpose of leading BRUSH's Cyber Security capability and ensuring the security, resilience, and compliance of the organisation's IT environment across all business locations. The InfoSec Manager is responsible for the day-to-day management of cyber security operations, whilst driving the continuous development and enhancement of BRUSH's security posture, controls, and technologies.

The primary objective of the role is to safeguard BRUSH's information assets, systems, and services by maintaining a robust and proactive security framework that reduces organisational risk whilst enabling business growth and operational effectiveness. This includes ensuring security technologies and controls remain effective, supported, and lifecycle managed; security risks are identified and mitigated; compliance obligations are met; and cyber security investments are aligned with business priorities, regulatory requirements, and the evolving threat landscape.

Key Responsibilities

• Lead and manage the InfoSec function, ensuring the effective delivery of security operations, controls, and services across all BRUSH business locations.
• Support the development, implementation, and continuous improvement of the Group Cyber Security capabilities.
• Provide subject matter expertise and strategic guidance to IT leadership and business stakeholders on cyber security trends, risks, and emerging threats.
• Promote a strong security culture across the organisation through awareness, education, and engagement programmes.
• Oversee the day-to-day operation of cyber security monitoring, detection, investigation, and response activities across the organisation.
• Ensure effective management of security incidents, coordinating technical teams, third-party providers, and business stakeholders to minimise impact and restore services quickly.
• Ensure security controls are embedded within infrastructure, cloud platforms, networks, applications, and end-user computing environments.
• Lead, mentor, and develop the InfoSec team, fostering a culture of accountability, continuous improvement, and professional development.
• Assess third-party cyber security risks and ensure appropriate controls are implemented throughout the supplier lifecycle.