Operations & Assurance Security Manager

What You’ll Do

As an Operations & Assurance Security Manager, you’ll develop, implement, and maintain information security, risk management, and compliance frameworks. This role ensures that systems, processes, and data are protected against threats while meeting regulatory and corporate governance requirements.

Security Management

• Set direction for the development of security policies, standards, and procedures
• Oversee cybersecurity strategy and ensure protection of IT systems, networks, and data
• Support security incidents and lead incident response and remediation activities
• Ensure regular vulnerability assessments and penetration testing is carried out in line with system lifecycle management and continuous monitoring
• Ensure alignment with industry standards such as ISO 27001, Cyber Essentials, JSP 453 and JSP 440 Secure by Design
• Drive continuous improvement of the security programme, identifying gaps, emerging risks, and opportunities for enhancement
• Manage and cohere security resource
• Ensure security resource is suitably qualified and experienced for the tasks and roles they are assigned
• Manage security and operational risks across the contract
• Ensure Secure by Design and JSP 453 evidence packs are developed, maintained and remain current throughout the product’s lifecycle
• Lead internal and external audits, ensuring compliance with regulatory requirements
• Provide assurance reporting to senior management and stakeholders

Compliance & Governance

• Ensure compliance with relevant legislation (e.g., GDPR, Data Protection Act)
• Develop governance frameworks and monitor adherence across the contract
• Work with legal and regulatory bodies on compliance matters

Stakeholder Engagement

• Collaborate with IT, operations, and business teams to embed security practices
• Provide training and awareness programs to promote a security-first culture
• Act as the primary point of contact for security and assurance‑related matters
• Manage relationships with external partners, vendors and auditors
• Overall management and coherence and stakeholder management

Performance & Reporting

• Produce regular reports on security posture, risks, and compliance status
• Support business continuity and disaster recovery planning

UK Security Clearance

Due to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance.United Kingdom Security Vetting: clearance levels – GOV.UK (www.gov.uk)

#J-18808-Ljbffr…