Serco Limited
Information Security Manager Home-based with UK-wide travel required (Midlands base preferred due to contract locations) Full Time, Permanent Band 4 / Up to £63,000 (dependent on experience)
Serco is looking for an experienced Information Security Manager (ISM) to play a pivotal role in strengthening information security across our Restart contract. This is an exciting opportunity for someone who wants to get hands‑on with operational security, influence contract delivery, and make a tangible impact across multiple sites.
As the Information Security Manager, you will take ownership of the information security management framework across the contract, working closely with operational leaders to embed strong security practices, protect sensitive data, and ensure compliance with regulatory and contractual requirements. This role goes beyond compliance – you will help shape security culture, guide stakeholders, and drive practical improvements in how security and data protection are delivered on the ground.
You’ll operate across a network of operational sites, building trusted relationships with contract leadership and Data Protection Champions while ensuring alignment with security standards, ISO27001 requirements, and UK data protection legislation.
The role involves regular travel to contract locations across the UK, with a Midlands base preferred to support effective coverage of the sites.
Responsibilities
- Managing information security risk management processes
- Leading information security incident management and investigations
- Coordinating information security assurance activities
- Establishing and managing an Information Security Management Forum
- Take accountability for data protection matters, ensuring consistent application across contracts through a network of Data Protection Champions
- Ensuring ongoing compliance with ISO27001 certification/alignment and HMG security controls
- Conducting gap analysis against security frameworks, particularly ISO27001, and implementing remediation plans
- Supporting projects and solution designs by advising on: security policy and HMG best practice, assurance requirements, technical security controls, physical security requirements and personnel and procedural controls
- Managing security documentation, risk registers, and audit evidence
- Coordinating security testing activities such as penetration tests and IT Security Health Checks
- Engaging with external auditors and assurance providers, supporting remediation actions where required
- Driving a culture of security awareness and data protection compliance across the contracts
What you’ll need to do the role
- ISO27001 Lead Implementer and Lead Auditor certification
- Strong knowledge of data protection legislation (GDPR / Data Protection Act 2018)
- Experience managing information security risk and incident management
- Experience supporting or maintaining ISO27001 certified environments
- Ability to conduct security framework gap analysis and remediation planning
- Experience engaging with external security auditors and assurance providers
- Ability to work independently and manage multiple stakeholders
- Strong analytical and pragmatic problem‑solving skills
- Clear communication skills with the ability to translate complex security concepts for non‑technical audiences
- Strong organisational skills and ability to deliver outcomes to deadlines
- Ability to build trusted relationships with customers, stakeholders, and accreditors
- Ability to achieve and maintain BPSS clearance
Why Serco
Meaningful and vital work: In this position, your work is vital to the business, in terms of decisions and growth. You will gain a world of opportunity working for a globally operating business delivering essential services across 5 vital sectors, personal growth, achievement and development won’t be hard to find. You'll also work with great people. You’ll find yourself working in a highly motivated, supportive environment where no two days are the same, with experienced colleagues who strive for excellence.
What we offer
- Flexible working considered
- Pension – 6%
- Chance to contribute to innovation in the public services
- A company passionate about diversity and inclusion
- Serco discounts which include cinema, merlin entertainment and online shopping discounts, and discounts on mobile phone plans and leisure centre memberships.
- A range of benefits to support the health and wellbeing of you and your family such as Employee Assistance Programme, Simply Health Cash Plans, and more.
- A wealth of career development training to suit your future aspirations. These range from role specific training, leadership coaching, formal study and much more to support you to build your career with Serco.
- A safe and supportive culture.
#J-18808-Ljbffr