The Works
Senior Information & Cyber Security Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Location
Hybrid: 1 - 2 days at our Support Centre in Coleshill, Birmingham.
Why The Works?
We don’t just sell products.
We inspire reading, learning, creativity and play.
The Works. It literally means everything. And whatever your story or background, we’re all about unlocking imagination and making creativity accessible to everyone. Whether you’re engaging with customers on the frontline or supporting our colleagues behind the scenes, your impact can be profound and far-reaching.
This is more than toys and books and art supplies. This is about inspiring people to read, learn, create and play. So, with the right passion, it all starts with you.
Become a Senior Information & Cyber Security Manager
At The Works, it all starts with our people, customers and the trust they place in us every day. As our Senior Information & Cyber Security Manager, you'll play a vital role in protecting the technology, data and systems that keep our business running safely and securely.
Working closely with the Director of Technology Services, you'll lead our information and cyber security programme, helping to create a resilient, trusted and secure environment for colleagues and customers alike. From shaping and delivering our security strategy to managing risk, governance and compliance, you'll ensure we're prepared for today's challenges and tomorrow's opportunities.
You'll lead a small internal team, partner with our outsourced Security Operations Centre and work closely alongside our Network Operations partners. Together, you'll drive strong security practices across the business, safeguarding our systems, customer information and payment environments while enabling innovation and growth with confidence.
Your Mission
- Deliver the enterprise-wide information security strategy aligned to business objectives and regulatory requirements.
- Establish and govern security frameworks and policies (e.g. ISO 27001, NIST, PCI DSS, Cyber Essentials Plus), ensuring ongoing compliance and audit readiness.
- Lead security risk management, maintaining the risk register with clear ownership, mitigation plans, and effective tracking/reporting.
- Own the security programme roadmap and investment plan, prioritising initiatives to address risk, compliance, and business change.
- Oversee security operations and incident response, working with the outsourced SOC to ensure effective monitoring, escalation, and regulatory-compliant breach management.
- Manage threat and vulnerability capabilities, including penetration testing, threat intelligence, and proactive threat hunting across the estate.
- Own data security and regulatory compliance, including DLP strategy, PCI environments, DPIAs, and partnership with the DPO on GDPR obligations.
- Embed security into architecture and technology, ensuring security-by-design across platforms, cloud environments, and change programmes, supported by an effective tooling strategy (SIEM, EDR/XDR, DLP).
- Own third-party security and supplier assurance, managing vendors and ensuring ongoing compliance, risk visibility, and performance against SLAs.
- Build and lead a high-performing security function, driving team capability, stakeholder engagement, and a strong organisational security culture through awareness and training.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills/Behaviours That Will Set You Apart
- Demonstrable experience in information security leadership roles
- Strong working knowledge of GDPR, PCI DSS, ISO 27001, Cyber Essentials, and NIST Cybersecurity Framework
- Experience running vulnerability management programmes and interpreting threat intelligence.
- Understanding of the retail-specific threat landscape and drive to keep abreast of threats.
- Experience managing SOC providers and security vendors, including SLA governance and escalation management
- Hands-on or oversight experience with SIEM, SOAR, EDR/XDR, DLP, and vulnerability scanning tooling.
- Strong stakeholder communication skills, including the ability to translate technical risk into business impact.
Being a great leader
As a great leader with wonderful people skills, you'll create an environment that's more than just co-workers — it's a team.
- Align Goals with Values: Ensure that your team’s goals are clearly connected to the company’s values and purpose. This helps colleagues see the bigger picture and understand how their work contributes to the overall mission.
- Clear Communication: Ensure that your team understands the goals, expectations, and their roles. Regularly share updates, encourage open dialogue and have regular check-ins.
- Role Model: Lead by example. Demonstrate the behaviours and attitudes you expect from your team, such as punctuality, responsibility, and being a brand ambassador.
- Provide Feedback: Offer constructive feedback regularly. Recognise achievements and address areas for improvement in a supportive and continuous growth manner.
- Empower Your Team: Delegate tasks and trust your team to handle them. This builds confidence and promotes professional growth.
- Conflict Resolution: Address conflicts promptly and fairly. Foster an environment where issues can be discussed openly and resolved amicably.
- Empathy: Understand and consider the feelings and perspectives of your team members. This helps in building strong, supportive relationships
Get help with your application
Your very own career expert that helps elevate your application to the next level.
And let's not forget about the most important part… your team's well-being and aspirations. You'll be their biggest supporter, cheering them on. You'll have amazing everyday conversations with your team, discussing everything from their performance to their wildest career aspirations.
Our PERKS really are ‘The Works’
- 💪 25% Colleague Discount! - Plus, exclusive Double Discount days!
- 😎 MyWorks - Access exclusive online discounts across hundreds of retailers, holidays, utilities deals, tech and more
- 🏡 Family Friendly Leave - Enjoy some time well spent with enhanced maternity, paternity and adoption pay.
- 🚀 Holiday – 33 days including bank holidays.
- 💃 Holiday Purchase - Purchase an additional 5 days
- 🎓 Can-Do Academy - Grow your skills and career with instant access to further training and development in areas that interest you.
- 💸 Stream - Claim early access to 50% of your wages as you earn them – for when ‘life’ happens!
- 🏬 Share Scheme - Unleash your inner Monopoly mogul and own a piece of The Works!
- 💛 24/7 support for you and your family - Through our partnership with the Retail Trust who provide an Employee Assistance Programme and so much more!
- 🩺 Healthcare Cash Plan – To support your everyday healthcare costs
- 🥳 And loads more! – Long Service Awards, pension, life assurance, Cycle to Work and optional charity giving.
Our Purpose
To inspire reading, learning, creativity and play 💛💙
Our Values
- We are Crafty 🎨 | Smart with what we've got.
- We are Caring 💛 | Heart in every action.
- We are Can-do 🚀| Energy that gets it done.
We Listen. We Care
Each year, we run an anonymous colleague engagement survey. This is so important for us to hear your feedback and suggestions. We want to know what’s going great, and what needs a couple of tweaks to help make The Works the best place you’ve ever worked! You’ll have opportunity to help give us that direction.
Promoting Diversity, Inclusion, and Applying Reasonable Adjustments
At The Works, we are proud to have an inclusive culture where everyone truly feels able to be themselves. Our roles are open to all, including under-represented groups such as ethnic minorities, people with disabilities, carers & members of the LGBTQ+ community (including those who identify as lesbian, gay, bi, trans, non-binary, or use another term).
We are open to discussions around working hours and flexible working. And, where possible, we'll try to support this. If you need reasonable adjustments for an interview you might attend with us, let us know in your application and we’ll be happy to help!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills