Your new company:

I am looking to recruit a Cyber Defence Manager to join a leader in the hospitality space around the Birmingham area. The business has been going through tech transformation recently, so you'll be joining at a good time in which the business is making improvements and going through a journey.

The role responsibilities:

• Lead and develop the organisation's cyber defence and information security capability.
• Manage and coach a small team of Information Security professionals.
• Manage and drive effective performance of multiple security vendor partners.
• Own and enhance security incident response processes and recovery activities.
• Lead security investigations and oversee remediation
• Drive compliance with security policies, standards and regulatory requirements, including ISO 27001, Cyber Essentials and PCI-DSS.
• Manage security audits, risk assessments and improvement plans
• Deliver security reporting, metrics and risk updates to senior stakeholders and governance forums.
• Partner with technology and business teams to embed security into projects, change initiatives and supplier engagements.
• Promote a strong security culture through awareness programmes, education and stakeholder engagement.
• Maintain awareness of emerging threats, vulnerabilities and best practices to continually improve security maturity.

You will need:

• Proven experience leading a Cyber Security, Cyber Defence or Information Security function within a complex organisation.
• Strong knowledge of security operations, incident response, risk management and security governance.
• Experience developing and implementing security policies, controls and security improvement programmes.
• Excellent stakeholder management and communication skills, with the ability to influence at all levels.
• Strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practices.
• Experience leading teams and driving positive change across technology and business functions.
• A pragmatic and commercial approach, balancing security requirements with business objectives.
• Ability to manage multiple priorities and make informed risk-based decisions.
• A hands-on mindset with a genuine passion for cyber security and continuous improvement.