Job Introduction
Role: Information Security Manager
Salary: £60,00 - £65,000
Working Pattern: Hybrid role with 2-3 days per week on site and the remainder working from home.
About Landmarc
Landmarc is the leading Industry Partner to the Defence Infrastructure Organisation (DIO), responsible for managing and maintaining the Defence Training Estate (DTE). Our Information and Technology (I&T) function enables our people to deliver this contract by providing reliable, secure, and modern IT services. The team covers Data and Insights, Technical Architecture and Engineering, Information Security, Operations, and the delivery of IT change.
The Role
We are seeking a proven Information Security Manager to lead Landmarc's information and IT security capability. This is a pivotal role, responsible for managing and reducing security risks that could impact the organisation, while ensuring compliance with contractual, regulatory, and best-practice security requirements. You will be the focal point for all information security matters, shaping our InfoSec strategy, policies, governance and assurance activities, and working closely with internal and external stakeholders, including MoD and DIO representatives. You will also lead and develop our IT Security Officer and work collaboratively across the Information and Technology Management Team.
Key Responsibilities
Information Security Leadership
- Own and manage Landmarc's Information Security requirements and compliance obligations.
- Develop, maintain and deliver the Information Security strategy, plans, policies, processes and best practices.
- Act as Landmarc's subject matter expert for all Information Security matters, engaging with internal and external stakeholders (including SIRO, MoD security representatives and accreditors).
- Ensure compliance with Security Operating Procedures (SyOps) across all environments, escalating non-compliance where appropriate.
- Produce, review and maintain high-quality security documentation aligned to internal and external standards.
Governance, Assurance & Compliance
- Lead assurance, audit and accreditation activity (e.g. Cyber Essentials, ISO27001).
- Own remediation plans for identified security gaps and work with stakeholders to deliver them.
- Provide guidance and assurance against ISO27001 requirements and support secure day-to-day operations.
- Maintain awareness of MoD Industry Security Notices and related MoD/DIO security requirements.
- Coordinate Security Working Group meetings and manage actions and outputs.
Operational & Strategic Support
- Manage and maintain appropriate Information Security controls and tooling.
- Define Information Security awareness and training requirements, working with Learning & Development to ensure suitable content and completion.
- Define supplier Information Security due diligence requirements and support colleagues with assessments of new and existing suppliers.
- Champion good‑practice Information Security governance, processes and tools.
- Support Information and Technology Management Team colleagues in delivering shared objectives.
Team Leadership & Management
- Line manage and develop the IT Security Officer, providing guidance, coaching and performance support.
- Conduct regular team meetings, one‑to‑ones and performance reviews.
- Foster a collaborative, positive and high‑performing team culture.
- Identify and support training and development opportunities for the team.
Essential Skills, Experience and Knowledge
- Strong, in‑depth understanding of information and cyber security.
- Proven experience defining and delivering Information Security best practice.
- Experience leading Information Security initiatives, including awareness programmes, training and phishing simulations.
- Good technical understanding of information security, including network architecture, SDLC, penetration testing, DLP tools, patching and vulnerability management.
- Working knowledge of National Cyber Security Centre (NCSC) guidance and best practice.
- Understanding of data governance, cyber security and data protection principles.
- Experience working with security audits and assurance activities.
- Strong Microsoft Office skills.
Desirable
- Experience working in a MoD‑restricted environment and knowledge of MoD security standards.
- Familiarity with the NIST framework.
- Recognised Information Security qualifications such as CISSP, CISM, CISA, CIPT or ISO27001 Lead Auditor.
What You'll Be Great At
- Clear and confident communication, both written and verbal.
- Building effective relationships with business and technical stakeholders.
- Leading, motivating and developing a small team.
- Working independently while collaborating effectively with others.
- Managing competing priorities with a proactive and positive approach.
- Being outcomes‑focused, flexible and resilient.
- Maintaining a strong focus on health and safety.
Employment Prerequisites
- Eligibility for BPSS and SC clearance (current SC clearance desirable).
- Full UK driving licence (desirable, to support travel between Landmarc locations).
Benefits and Compensation
Pension: Join our company stakeholder pension scheme, with contributions of up to 8% of your salary from Landmarc.
Generous Holiday Entitlement: Enjoy 25 days of annual leave pro‑rata. Your holiday allowance grows with your continued service. You can purchase up to 10 additional days each year for greater flexibility.
Other Amazing Benefits:
- Reward Gateway Benefit Scheme: Unlock exclusive discounts and savings for you and your family.
- Annual Salary Review: Conducted in consultation with our recognised Trade Unions to ensure fairness.
- Life Assurance: Insured for three times your annual salary to provide peace of mind for your loved ones.
- Health Cash Plan: Access health benefits for you and your family (add up to four children under 24 to your policy).
- Professional Development: Reimbursement of professional fees and support for ongoing training.
- Family‑Friendly Policies: Supporting you during life's important moments.
- Sick Pay: Sick pay starts after just 6 months of service.
#J-18808-Ljbffr