What You'll Be DoingAs the Cyber Security Lead / Information Security Lead, you'll work closely with the Head of Information Security and key stakeholders across IT, Infrastructure, Development, Legal and the wider business.You'll help maintain and continually improve the Information Security Management System (ISMS), supporting ISO 27001 certification and ensuring appropriate security policies, processes and controls remain effective.A significant part of the position will involve GRC and security assurance, including security risk assessments, internal and external audits, customer assurance, supplier security assessments and supporting certification and compliance activities.You'll also remain close to the technical security environment, working with technical teams across Infrastructure Security, Network Security, vulnerability management, patching, penetration testing, secure development, cloud security and incident response.The role will also provide exposure to business continuity, disaster recovery, DPIAs, BIAs, Cyber Essentials and security awareness, giving you broad ownership across both operational and governance-focused Information Security.

What We're Looking ForWe're looking for someone who can operate comfortably across both technical Cyber Security and Information Security GRC.

• Your experience should include:Information Security & GRC: ISO 27001, ISMS, security governance, risk management, policies, controls, compliance and security assurance.
• Security Audits: practical involvement in internal/external security audits, evidence gathering, remediation, certification and customer/supplier assurance.
• Technical Security: a strong understanding of Infrastructure Security, Network Security, vulnerabilities, patching, penetration testing, endpoints, identity/access and security controls.
• Security Operations & Resilience: incident response, vulnerability remediation, business continuity, disaster recovery and security improvement.

You'll ideally have 5+ years' experience within Cyber Security, Information Security, IT Security, Security Engineering, Infrastructure Security or a related environment.We're particularly interested in candidates who started their careers in roles such as Infrastructure Engineer, Network Engineer, Security Engineer, Infrastructure Security Engineer or Network Security Engineer and have subsequently developed strong Information Security, GRC and audit experience.

Equally, you may currently be working as a Senior Cyber Security Analyst, Senior Information Security Analyst, Information Security Consultant, Cyber Security Consultant, Technical Security Lead or Information Security Lead and be ready for greater ownership.

Technical Credibility + GRC ExperienceThe balance is important.

We're not looking for a purely technical Security Engineer with limited governance or audit exposure, and equally, this isn't a purely compliance-led GRC position.The successful candidate will be technically credible enough to engage with Infrastructure, Network and Engineering teams while having genuine hands-on experience across GRC, ISO 27001, ISMS and security audits.

You'll be comfortable discussing a technical vulnerability or security control with an engineer, while also working with auditors and senior stakeholders around risk, compliance, policies and security assurance.

Why Consider This Opportunity?This is a great opportunity to move into a broader Cyber Security Lead / Information Security Lead position without leaving your technical security background behind.You'll have the opportunity to influence security strategy, strengthen the ISMS, support ISO 27001 and security audits, improve security controls and work closely with technical teams to continually improve the organisation's overall security posture.

• Salary: £60,000 – £70,000 + Excellent BenefitsLocation: BedfordshireWorking Pattern: Hybrid – 1 Day a week OfficeEmployment: PermanentExperience: 5+ Years Cyber / Information SecurityCore Focus: Technical Security + GRC + Audit + ISO 27001