Information Security Manager

<p class="text-muted mb-3">Information Security Manager</p>

<p class="text-muted mb-3">12-Month Fixed-Term Contract</p>

<p class="text-muted mb-3">Hybrid (Cambridge once a week)</p>

<p class="text-muted mb-3">Salary: £85,000 - £100,000 FTE</p>

<p class="text-muted mb-3">REED Technology is exclusively partnering with an innovative digital health organisation that develops market-leading healthcare technology used by people across international markets.</p>

<p class="text-muted mb-3">We are seeking an experienced Information & Cybersecurity Manager to lead information security, product cybersecurity and cyber risk management across a growing, highly regulated technology environment.</p>

<p class="text-muted mb-3">This is a unique opportunity to become the organisation's security subject matter expert, taking ownership of security governance, compliance, product security and cyber risk whilst working closely with Software Development, Quality, Regulatory, Clinical, IT and Operations teams.</p>

<p class="text-muted mb-3">The successful candidate will combine strategic thinking with a hands-on approach, helping strengthen existing security practices while embedding cybersecurity throughout the software and product development lifecycle.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls.</p>

<p class="text-muted mb-3">Lead cybersecurity risk assessments, threat modelling and security reviews.</p>

<p class="text-muted mb-3">Oversee penetration testing, vulnerability management and remediation activities.</p>

<p class="text-muted mb-3">Advise on secure design, cloud security, mobile security, authentication, encryption and access control.</p>

<p class="text-muted mb-3">Embed cybersecurity</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements within software and product development processes.</h5>

<p class="text-muted mb-3">Support regulatory submissions, audits, inspections and customer security assessments.</p>

<p class="text-muted mb-3">Monitor emerging threats affecting applications, cloud services and connected technologies.</p>

<p class="text-muted mb-3">Manage incident response, business continuity and cyber resilience activities.</p>

<p class="text-muted mb-3">Review third-party suppliers and technology partners from a security perspective.</p>

<p class="text-muted mb-3">Provide security awareness training and guidance across the organisation.</p>

<p class="text-muted mb-3">Present security risks and recommendations to senior leadership.Essential Experience</p>

<p class="text-muted mb-3">5+ years' experience in Information Security, Cybersecurity or Product Security.</p>

<p class="text-muted mb-3">Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP.</p>

<p class="text-muted mb-3">Experience conducting risk assessments, threat modelling and vulnerability management.</p>

<p class="text-muted mb-3">Experience integrating security into software development lifecycles.</p>

<p class="text-muted mb-3">Strong cloud security knowledge, ideally AWS.</p>

<p class="text-muted mb-3">Experience supporting audits, regulatory reviews or compliance activities.</p>

<p class="text-muted mb-3">Excellent stakeholder management and communication skills.</p>

<p class="text-muted mb-3">Ability to work independently and deliver pragmatic, risk-based solutions.Highly Desirable</p>

<p class="text-muted mb-3">Medical Devices, HealthTech or Software as a Medical Device (SaMD).</p>

<p class="text-muted mb-3">Product Cybersecurity experience.</p>

<p class="text-muted mb-3">Knowledge of ISO 13485, ISO 14971, GDPR, HIPAA and FDA cybersecurity guidance.</p>

<p class="text-muted mb-3">Experience with connected devices, mobile applications or cloud-hosted healthcare platforms.Qualifications</p>

<p class="text-muted mb-3">Professional certifications such as CISSP, CISM, CRISC, CSSLP, ISO 27001 Lead Auditor or Lead Implementer are advantageous.</p>

<p class="text-muted mb-3">The organisation is focused on finding the right person with the expertise to lead and mature its cybersecurity capability during an exciting period of growth.</p>

<p class="text-muted mb-3">If you are interested in the opportunity and have the relevant experience for the role, please apply using the link provided</p>