IT Security & Risk Manager

Birmingham | Hybrid (2 days per week onsite) | Up to £74,000 + Benefits

Are you an experienced cyber security and risk professional looking for an opportunity to shape and influence an organisation's security strategy?

We're seeking an IT Security & Risk Manager to lead security governance, risk management, and cyber resilience initiatives, ensuring a robust and secure technology environment. Based in a well-established organisation, this role offers the chance to work closely with senior stakeholders while leading a small, specialist security team.

Our client is a respected organisation with a strong focus on technology, governance, and continual improvement. Security sits at the heart of its operations, and this position will play a critical role in protecting systems, managing risk, and driving strategic security initiatives.

Why Join?

• Lead and shape the organisation's cyber security strategy
• Influence senior leadership and board-level stakeholders
• Own and deliver a technical security roadmap
• Manage and develop a dedicated security and risk team
• Hybrid working with just 2 days per week onsite
• Opportunity to make a lasting impact across a complex technology environment

Key Responsibilities

• Lead the IT Risk and Security function and manage a small team
• Develop and deliver the technical security roadmap
• Oversee IT security policies, controls, and governance frameworks
• Manage IT risk assessments, threat modelling, and mitigation activities
• Own the IT risk register and ensure risks are effectively monitored and managed
• Lead responses to significant cyber security incidents
• Oversee vulnerability management and remediation programmes
• Act as the organisation's security subject matter expert, advising senior stakeholders and leadership teams

Requirements

• Proven experience in a senior IT Security, Cyber Security, or Information Security position
• Strong knowledge of risk management and threat analysis methodologies
• Experience implementing and maintaining security frameworks including ISO 27001
• Knowledge of Cyber Essentials and wider security best practices
• Experience developing security policies, controls, and procedures
• Ability to communicate and influence stakeholders at all levels
• CISSP, CISM, or similar security certification (or working towards) preferred
• Experience within a regulated environment
• Cyber resilience and security operations expertise
• Experience managing security professionals
• Strong commercial awareness and stakeholder management skills
  

Salary: Up to £74,000

We welcome applicants from all backgrounds. Our Client are an equal opportunities employer.

Right to work in the UK is required for this role.