Information Security Manager
£70,000 - £80,000
London - hybrid working
A well-established construction engineering business is seeking an experienced Information Security Manager to join them on a permanent basis. You'll be joining at a key time as the organisation expands its technical capability, with ambitious growth plans and multiple mergers and acquisitions planned. The business is looking for a hands-on InfoSec professional who can manage how data is handled, accessed, secured and maintained across its lifecycle.
Responsibilities:
Own and manage data lifecycle processes, ensuring data is secure, accessible and properly maintained from creation through to deletion
Oversee third-party and supplier security, ensuring appropriate controls and risk management are in place
Manage and process Data Subject Access Requests (DSARs) and related data handling activities
Support patch management and vulnerability remediation across systems and applications
Utilise tools such as Microsoft Purview to manage data visibility, classification and control
Identify and mitigate information security risks across systems, suppliers and processes
Collaborate with IT, Legal, HR and wider business teams to embed strong security practices
Develop reporting and insights on security and data activities, ideally using Power BI
Support ongoing security improvements in line with business growth and M&A activity
Requirements:
Strong experience in Information Security, with a focus on data handling and lifecycle management
Practical experience managing third-party/supplier risk
Good understanding of GDPR and data protection, particularly in real-world application (e.g. DSARs)
Experience with Microsoft Purview (Varonis beneficial but not essential)
Knowledge of patching and vulnerability management
Ability to operate in a hands-on, delivery-focused environment rather than pure governance
Strong stakeholder engagement and communication skills
Power BI experience for reporting is highly desirable
Based in Central London, with 4 days per week onsite initially, dropping to 3 after circa 3 months