ABOUT SAGE HOMES

Sage Homes is an innovative Blackstone and Regis business addressing the housing crisis in England by making good homes affordable for people across the country who need them.
Since 2017 we have delivered around 17,000 new homes across affordable rent, shared ownership and social rent for individuals and families. In 2021 Sage Homes became the largest provider of new affordable housing in England, and we continue to deliver high quality affordable homes across the country.
We have invested more than £3 billion into high-quality affordable housing. Our entrepreneurial spirit combined with our technical expertise has got us to where we are today and will enable future sustainable growth.

ABOUT THE ROLE:

We are seeking a highly motivated and experienced Information Security Manager to join our team. The role will enhance and evolve our security strategies, manage risk assessments, and work collaboratively across teams to strengthen our security posture. The role will also encompass the responsibilities of a Data Governance Manager. The successful candidate will have a strong background in information security and data governance, with experience in delivering ISO27001 and Cyber Essentials Plus certifications. This is a non-technical role focussed on information security and data governance, but working closely with the technical members of the IT team to implement and management related tooling.

KEY RESPONSIBILITIES:

• Develop and implement the organisation’s information security strategy.
• Maintain and develop security policies, procedures, and risk management frameworks.
• Monitor and analyse security threats, vulnerabilities, and incidents, and respond appropriately.
• Conduct programmed security audits, risk assessments, and penetration tests.
• Ensure ongoing compliance with ISO27001 and Cyber Essentials Plus certifications.
• Develop and manage the organization’s data governance framework, ensuring data integrity, confidentiality, and availability.
• Provide guidance and support to staff on information security and data governance best practices.
• Monitor and report on the effectiveness of the information security and data governance programs.
• Stay abreast of the latest industry trends and regulatory requirements related to information security and data governance.
• Lead cybersecurity awareness programs and provide training for employees.
• Collaborate with all departments, especially IT, legal, and executive teams, to integrate security into business operations.
• Oversee security technology investments and improvements.
• Manage security incidents, investigations, and reporting procedures.
• Manage 3rd party outsourced Security Operations Centre (SOC) provider